TI-2022-15989 CVE-2022-35413 · GHSA-rwxr-7mfr-m8cg
WAPPLES through 6.0 has a hardcoded systemi account.
Priority MEDIUM 60
WAPPLES through 6.0 has a hardcoded systemi account.
Pentasecurity
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Pentasecurity records in CISA KEVNo Pentasecurity vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2022-16080 CVE-2022-35582 · GHSA-5v2p-2vjm-j3w4
Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect…
Priority MEDIUM 40
Penta Security Systems Inc WAPPLES 4.0.*, 5.0.0.*, 5.0.12.* are vulnerable to Incorrect Access Control.
TI-2022-13326 CVE-2022-31322 · GHSA-6x2g-9wvj-4q72
Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate…
Priority LOW 34
Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to escalate privileges via overwriting files using SUID flagged executables.
TI-2022-13327 CVE-2022-31324 · GHSA-gw88-98xg-7785
An arbitrary file download vulnerability in the downloadAction() function of Penta…
Priority LOW 29
An arbitrary file download vulnerability in the downloadAction() function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request.