Vendors / Adremsoft Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Adremsoft records in CISA KEV No Adremsoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01803 · Published 2020-12-16 · No fix listed CWE-798
Priority MEDIUM 45
AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04213 · Published 2020-12-16 · No fix listed CWE-78
Priority MEDIUM 44
AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0113 · Published 2020-12-16 · No fix listed CWE-200
Priority MEDIUM 42
AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01837 · Published 2020-12-16 · No fix listed
Priority LOW 30
AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the NetCrunch server.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0084 · Published 2020-12-16 · No fix listed CWE-918
Priority LOW 25
AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the NetCrunch web client.
CVSS 3.1 MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00444 · Published 2020-12-16 · No fix listed CWE-352
Priority LOW 25
AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the NetCrunch web client.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00576 · Published 2020-12-16 · No fix listed CWE-79
Priority LOW 25
AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded or encrypted.
CVSS 3.1 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00281 · Published 2020-12-16 · No fix listed CWE-522
Open these records in search → All records by CVSS severity
2 2 4 0 0
THREATIST.IORead the docs