Priority MEDIUM 49
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.00329 · Published 2025-11-14 · No fix listed CWE-284
Priority MEDIUM 44
A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00769 · Published 2025-11-24 · No fix listed CWE-22
Priority MEDIUM 43
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges.
CVSS 3.1CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.00281 · Published 2025-11-14 · No fix listed CWE-284
Priority LOW 33
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00366 · Published 2025-11-24 · No fix listed CWE-284
Priority LOW 33
A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive infor…
CVSS 3.1HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00272 · Published 2025-11-14 · No fix listed CWE-80
Priority LOW 33
An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00324 · Published 2025-11-14 · No fix listed CWE-200
Priority LOW 33
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00296 · Published 2025-11-24 · No fix listed CWE-284
Priority LOW 30
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00238 · Published 2025-11-24 · No fix listed CWE-798
Priority LOW 28
A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive informat…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00181 · Published 2025-11-14 · No fix listed CWE-80
Priority LOW 20
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Technical Information to be Disclosed through stack trace.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00238 · Published 2025-11-14 · No fix listed CWE-209
Priority LOW 19
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote access to content despite lack of the correct permission through a…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00214 · Published 2025-11-14 · No fix listed CWE-284
Priority LOW 18
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2.
CVSS 3.1MEDIUM 4.1· Local · High privileges · No interaction · EPSS 0.00093 · Published 2025-11-14 · No fix listed CWE-327
Priority LOW 17
A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure.
CVSS 3.1LOW 3.8· Network · High privileges · No interaction · EPSS 0.00202 · Published 2025-11-14 · No fix listed CWE-918
Priority LOW 17
An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote Path Traversal for loading arbitrary external content.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00295 · Published 2025-11-14 · No fix listed CWE-22
Priority LOW 15
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00093 · Published 2025-11-14 · No fix listed CWE-312