Sony

Records91All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high44CVSS 7.0–8.9

Exploited now

Sony records in CISA KEV

No Sony vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xav-ax8500 Firmware 6 records MEDIUM Bravia Signage 3 records HIGH Playstation Portable 3 records LOW R5c Firmware 3 records MEDIUM Wd65 Firmware 3 records MEDIUM Wd75 Firmware 3 records MEDIUM We6 Firmware 3 records MEDIUM We75 Firmware 3 records MEDIUM

Records

3 records in Bravia Signage · all components

TI-2020-19058 CVE-2020-36923 · GHSA-hg2f-jm3j-qjq8

Sony BRAVIA Digital Signage 1.7.8 Client-Side Protection Bypass via IDOR

HIGH 70

Sony BRAVIA Digital Signage 1.7.8 contains an insecure direct object reference vulnerability that allows attackers to bypass authorization controls.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00971 Published 2026-01-06 No fix listed CWE-639

TI-2020-19057 CVE-2020-36922 · GHSA-xx55-j824-wmvf

Sony BRAVIA Digital Signage 1.7.8 Unauthenticated System API Information Disclosure

HIGH 70

Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0064 Published 2026-01-06 No fix listed CWE-497

TI-2020-19059 CVE-2020-36924 · GHSA-q7w6-6g89-9grw

Sony BRAVIA Digital Signage 1.7.8 Unauthenticated Remote File Inclusion

MEDIUM 63

Sony BRAVIA Digital Signage 1.7.8 contains a remote file inclusion vulnerability that allows attackers to inject arbitrary client-side scripts through the content material URL parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00541 Published 2026-01-06 No fix listed CWE-829

Open these records in search →

Critical	12
High	44
Medium	30
Low	5
No CVSS	0