Read the docs

Meteocontrol

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Meteocontrol records in CISA KEV

No Meteocontrol vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Web'log Basic 100 3 records HIGH Web'log Light 3 records HIGH Web'log Pro 3 records HIGH Web'log Pro Unlimited 3 records HIGH Weblog 1 record LOW

Records

4 records

TI-2016-02066 CVE-2016-2296 · GHSA-g7wf-vfjj-8q52

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require…

Priority HIGH 76

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vec…

CVSS 3.0CRITICAL 9.4 Network No auth No interaction EPSS 0.6426 Published 2016-05-14 No fix listed CWE-254
TI-2016-03875 CVE-2016-4504 · GHSA-ggpw-5qfx-mxxj

Cross-site request forgery in Meteocontrol WEB'log

Priority LOW 39

A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and Pro Unlimited all versions.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00494 Published 2017-03-21 No fix listed CWE-352
Open these records in search →