Vendors / 42Gears Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 5 CVSS 7.0–8.9
Exploited now 42Gears records in CISA KEV No 42Gears vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
An issue was discovered in 42Gears SureMDM before 2018-11-27.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01777 · Published 2019-02-05 · No fix listed CWE-200
Priority LOW 36
An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01553 · Published 2019-02-05 · No fix listed CWE-200
Priority LOW 35
An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.
CVSS 3.0 HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.01562 · Published 2019-02-05 · No fix listed CWE-918
Priority LOW 32
An issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access policy for Silverlight applications.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01433 · Published 2019-02-05 · No fix listed CWE-200
Priority LOW 32
An issue was discovered in 42Gears SureMDM before 2018-11-27, related to CORS settings.
CVSS 3.0 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01433 · Published 2019-02-05 · No fix listed CWE-200
Priority LOW 30
Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03064 · Published 2023-07-25 · No fix listed CWE-203
Open these records in search → All records by CVSS severity
Critical0 High5 Medium3 Low0 No CVSS0