Vendors / EfficientLab Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now EfficientLab records in CISA KEV No EfficientLab vulnerabilities are listed in CISA KEV.
Priority MEDIUM 51
An unauthenticated attacker with access to TCP port 12306 of the WorkExaminer server can exploit missing server-side authentication checks to bypass the login prompt in the WorkExaminer Professional console to gain admin…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00901 · Published 2025-10-21 · No fix listed CWE-602
Priority MEDIUM 42
The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00932 · Published 2025-10-21 · No fix listed CWE-798
Priority LOW 31
All WorkExaminer Professional traffic between monitoring client, console and server is transmitted as plain text.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00315 · Published 2025-10-21 · No fix listed CWE-319
Priority LOW 22
EfficientLab Controlio before v1.3.95 contains a DLL hijacking vulnerability caused by weak folder permissions in the installation directory.
CVSS 3.1 MEDIUM 5.1· Local · High privileges · No interaction · EPSS 0.00163 · Published 2026-04-23 · Fixed in 1.3.95 CWE-427
Open these records in search → All records by CVSS severity
1 2 1 0 0
