Denyall

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Denyall records in CISA KEV

No Denyall vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

I-suite 2 records HIGH Web Application Firewall 2 records HIGH

Records

2 records in Web Application Firewall · all components

TI-2017-10773 CVE-2017-14706 · GHSA-xg92-4q2x-2943

DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication…

HIGH 65

DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.28243 Published 2017-09-22 No fix listed CWE-287

TI-2017-10772 CVE-2017-14705 · GHSA-9cc5-7cfq-52hg

DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port…

MEDIUM 45

DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted into the type parameter to the tailDateFile function in /webservices/stream/tail.php…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0736 Published 2017-09-22 No fix listed CWE-78

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0