Vendors / Artica Tech Records 18 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 7
CVSS high 8
Exploited now Artica Tech records in CISA KEV No Artica Tech vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 89
The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.8126 · Published 2024-03-05 · No fix listed CWE-502
Priority HIGH 82
Services that are running and bound to the loopback interface on the Artica Proxy are accessible through the proxy service.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.16711 · Published 2024-03-05 · No fix listed CWE-288
Priority HIGH 82
The "Rich Filemanager" feature of Artica Proxy provides a web-based interface for file management capabilities.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00933 · Published 2024-03-05 · No fix listed CWE-288
Priority HIGH 72
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.44579 · Published 2024-03-05 · No fix listed CWE-23
Priority HIGH 65
Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.52345 · Published 2020-06-22 · No fix listed CWE-22
Priority MEDIUM 54
Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09324 · Published 2020-06-22 · No fix listed CWE-78
Priority MEDIUM 50
Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attack involving the username-form-id parameter to freeradius.users.php.
CVSS 3.0 CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.08708 · Published 2017-12-06 · No fix listed CWE-78
Priority MEDIUM 47
A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02563 · Published 2022-05-05 · No fix listed CWE-78
Priority LOW 37
An issue was discovered in Artica Proxy CE before 4.28.030.418.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02185 · Published 2020-07-20 · No fix listed CWE-89
Priority LOW 37
Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02917 · Published 2020-03-22 · No fix listed CWE-78
Priority LOW 37
Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin and ldap_password fields, using these credentials at logon.php, and then entering t…
CVSS 3.0 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02773 · Published 2019-02-01 · No fix listed CWE-522
Priority LOW 32
An issue was discovered in Artica Proxy before 4.30.000000.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02467 · Published 2020-07-15 · No fix listed CWE-79
Priority LOW 31
An issue was discovered in Artica Proxy 4.30.000000.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01938 · Published 2022-08-24 · No fix listed CWE-79
Priority LOW 31
An issue was discovered in Artica Proxy CE before 4.28.030.418.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01826 · Published 2020-07-20 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
7 8 3 0 0
THREATIST.IORead the docs