Gonicus

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Gonicus records in CISA KEV

No Gonicus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gonicus System Administration 2 records MEDIUM Gosa 2 records MEDIUM

Records

4 records

TI-2018-15927 CVE-2018-1000528 · GHSA-fh4v-6j27-m5mf

GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a…

MEDIUM 57

GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulnerability in change password form (html/password.php, #308) that can result in injection of arbitrary…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.46118 Published 2018-06-26 No fix listed CWE-79

TI-2019-08370 CVE-2019-11187 · GHSA-9f66-x3qx-v4cg

Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an…

MEDIUM 46

Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any account with a username containing the case-insensitive substring "success" when an arbitrary password is p…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01749 Published 2019-08-15 No fix listed CWE-287

TI-2007-00304 CVE-2007-0313 · GHSA-wf6x-4rj3-9mpq

Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows…

MEDIUM 43

Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.01895 Published 2007-01-18 No fix listed

TI-2003-01312 CVE-2003-1412 · GHSA-gpmc-5q92-m4gq

PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator…

LOW 35

PHP remote file inclusion vulnerability in index.php for GONiCUS System Administrator (GOsa) 1.0 allows remote attackers to execute arbitrary PHP code via the plugin parameter to (1) 3fax/1blocklists/index.php; (2) 6depa…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02691 Published 2007-10-20 No fix listed CWE-94

Open these records in search →

Critical	2
High	0
Medium	2
Low	0
No CVSS	0