Aquaverde GmbH

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Aquaverde GmbH records in CISA KEV

No Aquaverde GmbH vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aquarius Cms 3 records MEDIUM

Records

3 records in Aquarius Cms · all components

TI-2019-16072 CVE-2019-1010308 · GHSA-g6px-r2w9-3w2v

Insufficiently protected credentials in Aquaverde GmbH Aquarius CMS

MEDIUM 45

Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01592 Published 2019-07-15 No fix listed CWE-522

TI-2019-07127 CVE-2019-9734 · GHSA-75jw-x33v-6vgm

Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a log…

LOW 36

Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a log file due to an overwriting of configuration parameters under certain circumstances.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01637 Published 2019-04-24 No fix listed CWE-532

TI-2019-07119 CVE-2019-9724 · GHSA-2ghv-58hc-7529

aquaverde Aquarius CMS through 4.3.5 allows Information Exposure through Log Files…

LOW 36

aquaverde Aquarius CMS through 4.3.5 allows Information Exposure through Log Files because of an error in the Log-File writer component.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01408 Published 2019-04-24 No fix listed CWE-532

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0