Vendors / Kemptechnologies Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 1
Exploited now Kemptechnologies records in CISA KEV No Kemptechnologies vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 76
Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects: * LoadMaster: 7.2.40.0 and above * ECS: All versions * Multi-Tenancy: 7.1.35.4 and above
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.39181 · Published 2024-09-05 · Fixed in 7.2.60.1 CWE-78
Priority MEDIUM 48
A critical vulnerability in the KEMP LoadMaster Operating System (LMOS) 6.0.44 through 7.2.41.2 and Long Term Support (LTS) LMOS before 7.1.35.5 related to Session Management could allow an unauthenticated, remote attack…
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03271 · Published 2018-05-25 · No fix listed
Priority MEDIUM 42
The Application Firewall Pack (AFP, aka Web Application Firewall) component on Kemp Load Balancer devices with software before 7.2.40.1 allows a Security Feature Bypass via an HTTP POST request.
CVSS 3.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01223 · Published 2017-12-18 · No fix listed
Priority MEDIUM 41
A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01567 · Published 2020-02-07 · No fix listed CWE-352
Priority LOW 28
The Web Application Firewall (WAF) in Kemp LoadMaster 7.2.54.1 allows certain uses of onmouseover to bypass an XSS protection mechanism.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00517 · Published 2023-01-01 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 1 1 0 0
THREATIST.IORead the docs