Eginnovations

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Eginnovations records in CISA KEV

No Eginnovations vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2020-06889 CVE-2020-8592 · GHSA-hj68-m8g6-47mg

MEDIUM 45

eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feature).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.014 Published 2020-02-03 No fix listed CWE-89

TI-2020-06888 CVE-2020-8591 · GHSA-pfhj-vj8p-hpvv

MEDIUM 45

eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01438 Published 2020-02-03 No fix listed CWE-287

TI-2022-12030 CVE-2022-29594 · GHSA-mf45-vhg9-3c42

LOW 34

eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00304 Published 2022-06-02 No fix listed CWE-281