TSplus

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

TSplus records in CISA KEV

No TSplus vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Tsplus Remote Work · all components

TI-2023-14796 CVE-2023-31069 · GHSA-xcff-9rfc-c4h6

HIGH 82

An issue was discovered in TSplus Remote Access through 16.0.2.14.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03686 Published 2023-09-11 No fix listed CWE-312

TI-2023-14795 CVE-2023-31068 · GHSA-gx37-4cw7-q8m8

HIGH 82

An issue was discovered in TSplus Remote Access through 16.0.2.14.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05421 Published 2023-09-11 No fix listed CWE-276

TI-2023-11941 CVE-2023-27133 · GHSA-m4g4-hvch-vhgf

HIGH 82

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\www folder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00926 Published 2023-10-17 No fix listed CWE-276

TI-2023-11940 CVE-2023-27132 · GHSA-8c9g-7c4g-j7x7

HIGH 82

TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0106 Published 2023-10-17 No fix listed CWE-522