Read the docs

syslink software AG

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

syslink software AG records in CISA KEV

No syslink software AG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records

Priority MEDIUM 42

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00216 Published 2026-05-22 Fixed in 25.3.1 CWE-613
TI-2026-03353 CVE-2026-3873 · GHSA-q26g-448c-9p4x

Legacy built-in user account

Priority LOW 37

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.0022 Published 2026-03-13 Fixed in 25.3.0 CWE-798
TI-2026-07620 CVE-2026-8671 · GHSA-5qp4-pv6p-8gcx

Log Files contain encrypted secrets

Priority LOW 32

Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure.

CVSS 3.1HIGH 7.5 Adjacent network High privileges No interaction EPSS 0.00216 Published 2026-05-22 Fixed in 25.3.0 CWE-532
TI-2026-07621 CVE-2026-8672 · GHSA-hhj7-5v62-787q

Default credentials for internal DB

Priority LOW 22

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords.

CVSS 3.1MEDIUM 5.1 Local High privileges No interaction EPSS 0.00105 Published 2026-05-22 Fixed in 25.3.0 CWE-1393
Open these records in search →