BigAntSoft

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

BigAntSoft records in CISA KEV

No BigAntSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bigant Server 10 records HIGH Bigant Im Message Server 3 records HIGH Bigant Messenger 2 records HIGH Bigant Office Messenger 5 2 records MEDIUM

Records

3 records in Bigant Im Message Server · all components

TI-2012-05120 CVE-2012-6275 · GHSA-8jm2-5j3f-p7pq

Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server…

HIGH 73

Multiple stack-based buffer overflows in AntDS.exe in BigAntSoft BigAnt IM Message Server allow remote attackers to have an unspecified impact via (1) the filename header in an SCH request or (2) the userid component in…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.46498 Published 2013-02-24 No fix listed CWE-119

TI-2012-05119 CVE-2012-6274 · GHSA-cwq6-rvjc-59gf

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading…

MEDIUM 53

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.46868 Published 2013-02-24 No fix listed CWE-287

TI-2012-05118 CVE-2012-6273 · GHSA-fxr3-4p43-fvmw

SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote…

LOW 35

SQL injection vulnerability in BigAntSoft BigAnt IM Message Server allows remote attackers to execute arbitrary SQL commands via an SHU (aka search user) request.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0126 Published 2013-02-24 No fix listed CWE-89

Open these records in search →

Critical	4
High	8
Medium	5
Low	0
No CVSS	0