BigAntSoft

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

BigAntSoft records in CISA KEV

No BigAntSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bigant Server 10 records HIGH Bigant Im Message Server 3 records HIGH Bigant Messenger 2 records HIGH Bigant Office Messenger 5 2 records MEDIUM

Records

2 records in Bigant Office Messenger 5 · all components

TI-2024-36657 CVE-2024-54761 · GHSA-2wf3-32wx-c338

BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.

MEDIUM 61

BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.01768 Published 2025-01-09 No fix listed CWE-89

TI-2021-19362 CVE-2021-43430 · GHSA-xw8x-6f24-54jx

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via…

MEDIUM 40

An Access Control vulnerability exists in BigAntSoft BigAnt office messenger 5.6 via im_webserver, which could let a malicious user upload PHP Trojan files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01145 Published 2022-04-07 No fix listed CWE-434

Open these records in search →

Critical	4
High	8
Medium	5
Low	0
No CVSS	0