Bomgar

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Bomgar records in CISA KEV

No Bomgar vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Remote Support · all components

TI-2017-09494 CVE-2017-12815 · GHSA-vx88-5hj8-432c

MEDIUM 47

Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulnerability.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01954 Published 2018-03-26 No fix listed CWE-22

TI-2015-00871 CVE-2015-0935 · GHSA-68pw-2wmh-cpr9

MEDIUM 47

Bomgar Remote Support before 15.1.1 allows remote attackers to execute arbitrary PHP code via crafted serialized data to unspecified PHP scripts.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.11995 Published 2015-05-25 No fix listed CWE-94