Altova

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Altova records in CISA KEV

No Altova vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mobiletogether Server 2 records HIGH Databasespy 2011 1 record LOW Diffdog 2011 1 record LOW Mapforce 1 record LOW

Records

2 records in Mobiletogether Server · all components

TI-2021-15367 CVE-2021-37425 · GHSA-mwxw-r5fq-rx8v

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an…

HIGH 75

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.66278 Published 2021-08-10 No fix listed CWE-611

TI-2021-16090 CVE-2021-38490 · GHSA-8x79-xcgh-ghvm

Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a…

LOW 35

Altova MobileTogether Server before 7.3 SP1 allows XML exponential entity expansion, a different vulnerability than CVE-2021-37425.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00986 Published 2021-08-10 No fix listed CWE-776

Open these records in search →

Critical	1
High	1
Medium	3
Low	0
No CVSS	0