Read the docs

Efstechnology

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Efstechnology records in CISA KEV

No Efstechnology vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Autoform Pdm Archive · all components

Priority LOW 32

The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden functi…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01556 Published 2012-06-13 No fix listed CWE-264
Priority LOW 32

The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQue…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01556 Published 2012-06-13 No fix listed CWE-264
Priority LOW 30

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and t…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01527 Published 2012-06-13 No fix listed CWE-264
Open these records in search →