Rhubcom

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Rhubcom records in CISA KEV

No Rhubcom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Turbomeeting 3 records HIGH

Records

3 records

TI-2024-25565 CVE-2024-38287

The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting…

HIGH 82

The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to force the application into resetting the administrator's password to a random…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00544 Published 2024-07-25 No fix listed CWE-640

TI-2024-25567 CVE-2024-38289

A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in…

HIGH 75

A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to extract hashed passwords from the database, and authenticate…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.40609 Published 2024-07-25 No fix listed CWE-89

TI-2024-25566 CVE-2024-38288

A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB…

HIGH 67

A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allows authenticated attackers with administrator privileges to execute arbitrary commands on the underly…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03189 Published 2024-07-25 No fix listed CWE-77

Open these records in search →

Critical	2
High	1
Medium	0
Low	0
No CVSS	0