Arialsoftware

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Arialsoftware records in CISA KEV

No Arialsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Campaign Enterprise 5 records LOW

Records

5 records in Campaign Enterprise · all components

TI-2012-03307 CVE-2012-3824 · GHSA-23rx-gwwc-2hq5

In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization.

LOW 37

In Arial Campaign Enterprise before 11.0.551, multiple pages are accessible without authentication or authorization.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01847 Published 2020-01-10 No fix listed CWE-287

TI-2012-03305 CVE-2012-3822 · GHSA-wr49-p92q-9ch9

Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp…

LOW 37

Arial Campaign Enterprise before 11.0.551 has unauthorized access to the User-Edit.asp page, which allows remote attackers to enumerate users' credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01872 Published 2020-01-10 No fix listed CWE-863

TI-2012-03303 CVE-2012-3820 · GHSA-689j-26wf-j42h

Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign…

LOW 37

Multiple SQL injection vulnerabilities in Campaign11.exe in Arial Software Campaign Enterprise before 11.0.551 allow remote attackers to execute arbitrary SQL commands via the (1) SerialNumber field to activate.asp or (2…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02082 Published 2014-08-14 No fix listed CWE-89

TI-2012-03306 CVE-2012-3823 · GHSA-9jfp-m8g4-ccqm

Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved.

LOW 36

Arial Campaign Enterprise before 11.0.551 stores passwords in clear text and these may be retrieved.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01476 Published 2020-01-10 No fix listed CWE-522

TI-2012-03304 CVE-2012-3821 · GHSA-q9x9-3h5c-87j4

A Security Bypass vulnerability exists in the activate.asp page in Arial Software…

LOW 22

A Security Bypass vulnerability exists in the activate.asp page in Arial Software Campaign Enterprise 11.0.551, which could let a remote malicious user modify the SerialNumber field.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01169 Published 2020-01-10 No fix listed CWE-863

Open these records in search →

Critical	0
High	4
Medium	1
Low	0
No CVSS	0