Cososys

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Cososys records in CISA KEV

No Cososys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Endpoint Protector 2 records LOW Endpoint Protector Appliace 4 1 record MEDIUM

Records

2 records in Endpoint Protector · all components

TI-2019-09968 CVE-2019-13285 · GHSA-xr27-wwfr-j97v

CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection.

LOW 35

CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00965 Published 2020-05-04 No fix listed CWE-74

TI-2014-03204 CVE-2014-3932 · GHSA-hmr9-g4qv-c693

SQL injection vulnerability in the device registration component in wsf/webservice.php in…

LOW 35

SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 4.3.0.4 and 4.4.0.2 allows remote attackers to execute arbitrary SQL commands via unspecified paramet…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01236 Published 2014-06-02 No fix listed CWE-89

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0