TI-2017-10793 CVE-2017-14728 · GHSA-8ghv-f82m-w39j
An authentication bypass was found in an unknown area of the SiteOmat source code.
Priority MEDIUM 58
An authentication bypass was found in an unknown area of the SiteOmat source code.
Orpak
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Orpak records in CISA KEVNo Orpak vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2017-10882 CVE-2017-14854 · GHSA-p682-w72j-447w
A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for…
Priority MEDIUM 57
A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution.
TI-2017-10879 CVE-2017-14851 · GHSA-2hgq-6hrq-xxf4
A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25.
Priority MEDIUM 56
A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25.
TI-2017-10881 CVE-2017-14853 · GHSA-fh7c-h6pw-fjpf
The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior…
Priority MEDIUM 52
The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command.
TI-2017-10880 CVE-2017-14852 · GHSA-pp8q-gcv4-jjfq
An insecure communication was found between a user and the Orpak SiteOmat management…
Priority MEDIUM 45
An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate.
TI-2017-10878 CVE-2017-14850 · GHSA-w63m-q7q5-grjw
All known versions of the Orpak SiteOmat web management console is vulnerable to multiple…
Priority LOW 31
All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to improper external user-input validation.