TI-2023-15271 CVE-2023-31923 · GHSA-q32m-5wqx-f57m
Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions.
Priority HIGH 73
Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions.
supremainc
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
supremainc records in CISA KEVNo supremainc vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records
TI-2022-17986 CVE-2022-38351 · GHSA-3gcx-7vw9-42m9
A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate…
Priority HIGH 73
A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the update profile page.
TI-2026-23923 CVE-2026-31278 · GHSA-h5qg-wfw7-j3ph
Cleartext transmission of sensitive information in supremainc BioStar 2
Priority HIGH 67
An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying…
TI-2020-11831 CVE-2020-15050 · GHSA-jf9m-m947-xv7h
An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2.
Priority MEDIUM 64
An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2.
TI-2023-11954 CVE-2023-27167 · GHSA-grmq-x6cq-3wxv
Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the…
Priority MEDIUM 62
Suprema BioStar 2 v2.8.16 was discovered to contain a SQL injection vulnerability via the values parameter at /users/absence?search_month=1.
TI-2023-16502 CVE-2023-33364 · GHSA-wc5r-96vx-4jj6
An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which…
Priority MEDIUM 43
An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS commands on the BioStar 2 server.
TI-2023-16504 CVE-2023-33366 · GHSA-q62x-pq6x-fhvw
A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows…
Priority MEDIUM 41
A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute arbitrary SQL commands.
TI-2023-16503 CVE-2023-33365 · GHSA-3xwr-xcmc-7vq6
A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows…
Priority MEDIUM 40
A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files from the server's web server.
TI-2023-16501 CVE-2023-33363 · GHSA-8ggh-rx5r-h3jx
An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which…
Priority MEDIUM 40
An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functionality on BioStar 2 servers.