Read the docs

ReQuest Serious Play LLC

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

ReQuest Serious Play LLC records in CISA KEV

No ReQuest Serious Play LLC vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2020-19012 CVE-2020-36877 · GHSA-xf33-5vhp-qxgp

ReQuest Serious Play F3 Media Server <= 7.0.3 code execution

Priority HIGH 81

ReQuest Serious Play F3 Media Server 7.0.3 contains an unauthenticated remote code execution vulnerability that allows attackers to execute arbitrary commands as the web server user.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0077 Published 2025-12-05 No fix listed CWE-78
TI-2021-03321 CVE-2021-4465 · GHSA-m5xx-7q4g-9wfx

ReQuest Serious Play F3 Media Server <= 7.0.3 Remote DoS

Priority HIGH 77

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 contain a remote denial-of-service vulnerability.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00498 Published 2025-11-14 No fix listed CWE-400
TI-2020-19013 CVE-2020-36878 · GHSA-hw9g-6q6h-x6rm

ReQuest Serious Play F3 Media Player <= 3.0.0 Directory Traversal File Disclosure

Priority HIGH 77

ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log file…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00371 Published 2025-12-05 No fix listed CWE-73
TI-2020-19011 CVE-2020-36876 · GHSA-8wf6-q8c8-vqj7

ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020

Priority HIGH 77

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webserver's Python debug log file containing…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00401 Published 2025-12-05 No fix listed CWE-532
Open these records in search →