Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
DriveLock records in CISA KEVNo DriveLock vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 49
An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 before 25.1.6.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00319 · Published 2025-12-17 · No fix listed CWE-269
Priority MEDIUM 49
An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 through 24.2.*, and 25.1 through 25.1.*.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00374 · Published 2025-12-17 · No fix listed CWE-287
Priority MEDIUM 49
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00324 · Published 2025-12-17 · No fix listed CWE-170
Priority MEDIUM 43
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00276 · Published 2025-12-17 · No fix listed CWE-269
Priority MEDIUM 43
In DriveLock 24.1.4 before 24.1.5, 24.2.5 before 24.2.6, and 25.1.2 before 25.1.4, attackers can gain elevated privileges.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00455 · Published 2025-09-26 · No fix listed CWE-269
Priority MEDIUM 42
DriveLock Directory Traversal Information Disclosure Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0183 · Published 2026-07-29 · No fix listed CWE-22
Priority MEDIUM 42
DriveLock Directory Traversal Information Disclosure Vulnerability.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0183 · Published 2026-07-29 · No fix listed CWE-22
Priority MEDIUM 41
DriveLock SQL Injection Privilege Escalation Vulnerability.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00707 · Published 2026-07-29 · No fix listed CWE-89
Priority MEDIUM 41
An issue was discovered in 25.1.2 before 25.1.5.
CVSS 3.1CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00264 · Published 2025-12-17 · No fix listed CWE-79
Priority LOW 39
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00136 · Published 2025-12-17 · No fix listed CWE-269
Priority LOW 37
An issue was discovered in DriveLock 24.1 through 24.1.*, 24.2 before 24.2.8, and 25.1 before 25.1.6.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00116 · Published 2025-12-17 · No fix listed CWE-732
Priority LOW 33
DriveLock Directory Traversal Information Disclosure Vulnerability.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01524 · Published 2026-07-29 · No fix listed CWE-22
Priority LOW 32
DriveLock Directory Traversal Information Disclosure Vulnerability.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01596 · Published 2026-07-29 · No fix listed CWE-22
Priority LOW 29
An issue was discovered in DriveLock 24.1 before 24.1.6, 24.2 before 24.2.7, and 25.1 before 25.1.5.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00222 · Published 2025-12-17 · No fix listed CWE-284
THREATIST.IORead the docs