S3browser

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

S3browser records in CISA KEV

No S3browser vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

S3 Browser 2 records LOW

Records

2 records in S3 Browser · all components

TI-2018-14360 CVE-2018-20298 · GHSA-v2h5-c2mm-jm6r

S3 Browser before 8.1.5 contains an XML external entity (XXE) vulnerability, allowing…

LOW 32

S3 Browser before 8.1.5 contains an XML external entity (XXE) vulnerability, allowing remote attackers to read arbitrary files and obtain NTLMv2 hash values by tricking a user into connecting to a malicious server via th…

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01399 Published 2018-12-19 No fix listed CWE-611

TI-2024-25187 CVE-2024-37865 · GHSA-j6gh-w55p-c22w

An issue in S3Browser v.11.4.5 and v.10.9.9 and fixed in v.11.5.7 allows a remote…

LOW 27

An issue in S3Browser v.11.4.5 and v.10.9.9 and fixed in v.11.5.7 allows a remote attacker to obtain sensitive information via the S3 compatible storage component.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00651 Published 2024-07-09 No fix listed CWE-295

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0