Vendors / Cordaware Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Cordaware records in CISA KEV No Cordaware vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
Cordaware bestinformed Microsoft Windows client before 6.2.1.0 is affected by insecure SSL certificate verification and insecure access patterns.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01203 · Published 2019-02-25 · No fix listed CWE-295
Priority MEDIUM 41
An authenticated user in the "bestinformed Web" application can execute commands on the underlying server running the application.
CVSS 4.0 HIGH 8.6· Network · High privileges · No interaction · EPSS 0.00929 · Published 2025-02-18 · Fixed in 6.2.2.5 CWE-20
Priority LOW 38
Via the GUI of the "bestinformed Infoclient", a low-privileged user is by default able to change the server address of the "bestinformed Server" to which this client connects.
CVSS 4.0 HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.0017 · Published 2025-02-18 · Fixed in 6.3.7.0 CWE-15
Priority LOW 35
The Scripting and AutoUpdate functionality in Cordaware bestinformed Microsoft Windows client versions before 6.2.1.0 are affected by insecure implementations which allow remote attackers to execute arbitrary commands an…
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00558 · Published 2019-02-25 · No fix listed
Priority LOW 25
In the "bestinformed Web" application, some user input was not properly sanitized.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00497 · Published 2025-02-18 · Fixed in 6.2.2.5 CWE-20
Priority LOW 24
In the "bestinformed Web" application, some user input was not properly sanitized.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00445 · Published 2025-02-18 · Fixed in 6.2.2.5 CWE-20
Open these records in search → All records by CVSS severity
1 3 2 0 0
THREATIST.IORead the docs