Ixpdata

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Ixpdata records in CISA KEV

No Ixpdata vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easyinstall 13 records HIGH

Records

13 records in Easyinstall · all components

TI-2022-15848 CVE-2022-35120 · GHSA-r2rh-hpqm-rgj8

IXPdata EasyInstall 6.6.14725 contains an access control issue.

HIGH 73

IXPdata EasyInstall 6.6.14725 contains an access control issue.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0019 Published 2022-12-01 No fix listed CWE-312

TI-2023-14145 CVE-2023-30131 · GHSA-43pr-r6xw-f56v

An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary…

MEDIUM 51

An issue discovered in IXP EasyInstall 6.6.14884.0 allows attackers to run arbitrary commands, gain escalated privilege, and cause other unspecified impacts via unauthenticated API calls.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00939 Published 2023-10-19 No fix listed CWE-94

TI-2019-14345 CVE-2019-19897 · GHSA-4rxf-wvxr-7wq8

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service.

MEDIUM 51

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05556 Published 2020-01-23 No fix listed CWE-78

TI-2019-14344 CVE-2019-19896 · GHSA-g2j7-jqw5-568r

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the…

MEDIUM 48

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via weak permissions on the Engine Service share.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.03035 Published 2020-01-23 No fix listed CWE-276

TI-2023-12420 CVE-2023-27791 · GHSA-56qj-x9h6-9389

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG.

LOW 39

An issue found in IXP Data Easy Install 6.6.148840 allows a remote attacker to escalate privileges via insecure PRNG.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00933 Published 2023-10-19 No fix listed CWE-338

TI-2019-14341 CVE-2019-19893 · GHSA-7hww-289f-rq2g

In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the…

LOW 38

In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT AUTHORITY\SYSTEM.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02546 Published 2020-01-23 No fix listed CWE-22

TI-2023-12421 CVE-2023-27792 · GHSA-7wxc-mh8q-7484

An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate…

LOW 36

An issue found in IXP Data Easy Install v.6.6.14884.0 allows an attacker to escalate privileges via lack of permissions applied to sub directories.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00234 Published 2023-10-19 No fix listed CWE-862

TI-2023-14146 CVE-2023-30132 · GHSA-fh5x-h6r2-7rvf

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain…

LOW 35

An issue discovered in IXP Data EasyInstall 6.6.14907.0 allows attackers to gain escalated privileges via static Cryptographic Key.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00179 Published 2023-10-19 No fix listed CWE-326

TI-2023-12423 CVE-2023-27795 · GHSA-jpgp-pmqh-538w

An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key.

LOW 35

An issue found in IXP Data Easy Install v.6.6.14884.0 allows a local attacker to gain privileges via a static XOR key.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00223 Published 2023-10-19 No fix listed CWE-269

TI-2023-12422 CVE-2023-27793 · GHSA-jf4r-vjvc-pj36

An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain…

LOW 35

An issue discovered in IXP Data Easy Install v.6.6.14884.0 allows local attackers to gain escalated privileges via weak encoding of sensitive information.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00223 Published 2023-10-19 No fix listed CWE-269

TI-2019-14346 CVE-2019-19898 · GHSA-5jgv-j5rm-268h

In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on…

LOW 34

In IXP EasyInstall 6.2.13723, there are cleartext credentials in network communication on TCP port 20050 when using the Administrator console remotely.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00712 Published 2020-01-23 No fix listed CWE-319

TI-2019-14343 CVE-2019-19895 · GHSA-2826-h3cg-5m6j

In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against…

LOW 34

In IXP EasyInstall 6.2.13723, there is Lateral Movement (using the Agent Service) against other users on a client system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00445 Published 2020-01-23 No fix listed CWE-732

TI-2019-14342 CVE-2019-19894 · GHSA-2r7w-r6xm-q2q9

In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the…

LOW 25

In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00299 Published 2020-01-23 No fix listed CWE-732

Open these records in search →

Critical	3
High	9
Medium	1
Low	0
No CVSS	0