Vendors / BigAntSoft Records 17 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 4
CVSS high 8
Exploited now BigAntSoft records in CISA KEV No BigAntSoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0193 · Published 2025-02-04 · No fix listed CWE-288
Priority MEDIUM 48
BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.13483 · Published 2022-03-21 · No fix listed CWE-22
Priority MEDIUM 41
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01404 · Published 2022-03-21 · No fix listed CWE-434
Priority LOW 39
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00652 · Published 2022-03-21 · No fix listed CWE-352
Priority LOW 36
An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01607 · Published 2022-03-21 · No fix listed CWE-835
Priority LOW 36
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01554 · Published 2022-03-21 · No fix listed CWE-306
Priority LOW 35
BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00949 · Published 2022-04-05 · No fix listed CWE-311
Priority LOW 30
BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.03273 · Published 2022-03-21 · No fix listed CWE-916
Priority LOW 25
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00607 · Published 2022-03-21 · No fix listed CWE-79
Priority LOW 24
Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service (application crash) via a crafted ZIP file that is not properly handled when the victim us…
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02095 · Published 2010-03-03 · No fix listed CWE-119
Open these records in search → All records by CVSS severity
4 8 5 0 0
THREATIST.IORead the docs