Forlogic

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Forlogic records in CISA KEV

No Forlogic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Qualiex 3 records MEDIUM

Records

3 records

TI-2020-14776 CVE-2020-24030 · GHSA-w553-m7x7-p3hj

ForLogic Qualiex v1 and v3 has weak token expiration.

MEDIUM 47

ForLogic Qualiex v1 and v3 has weak token expiration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02667 Published 2020-09-02 No fix listed CWE-672

TI-2020-14775 CVE-2020-24029 · GHSA-9j29-262r-8x2g

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and…

MEDIUM 46

Because of unauthenticated password changes in ForLogic Qualiex v1 and v3, customer and admin permissions and data can be accessed via a simple request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01974 Published 2020-09-02 No fix listed CWE-287

TI-2020-14774 CVE-2020-24028 · GHSA-xv63-838w-fgf7

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege…

MEDIUM 42

ForLogic Qualiex v1 and v3 allows any authenticated customer to achieve privilege escalation via user creations, password changes, or user permission updates.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02297 Published 2020-09-02 No fix listed

Open these records in search →

Critical	2
High	1
Medium	0
Low	0
No CVSS	0