Netsaro

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Netsaro records in CISA KEV

No Netsaro vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Enterprise Messenger Server 3 records LOW

Records

3 records in Enterprise Messenger Server · all components

TI-2011-03251 CVE-2011-3694 · GHSA-94c5-xwp9-5rg5

The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows…

LOW 25

The Server Administration Console in NetSaro Enterprise Messenger Server 2.0 allows remote attackers to read application source code by appending a %00 character to a URL.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01076 Published 2011-09-27 No fix listed CWE-200

TI-2011-03250 CVE-2011-3693 · GHSA-jqpc-7929-rqmr

NetSaro Enterprise Messenger Server 2.0 allows local users to discover cleartext server…

LOW 10

NetSaro Enterprise Messenger Server 2.0 allows local users to discover cleartext server credentials by reading the NetSaro.fdb file.

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00275 Published 2011-09-27 No fix listed CWE-310

TI-2011-03249 CVE-2011-3692 · GHSA-3mmw-76hg-j982

NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in…

LOW 10

NetSaro Enterprise Messenger Server 2.0 stores cleartext console credentials in configuration.xml, which allows local users to obtain sensitive information by reading this file and performing a base64 decoding step.

CVSS 2.0LOW 1.9 Local No auth Interaction — EPSS 0.00275 Published 2011-09-27 No fix listed CWE-310

Open these records in search →

Critical	0
High	0
Medium	1
Low	2
No CVSS	0