Vendors / Velneo Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now Velneo records in CISA KEV No Velneo vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 41
Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims's username and hashed password to spoof the victim's id against the server.
CVSS 3.1 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00778 · Published 2022-11-28 · No fix listed CWE-290
Priority LOW 28
Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default.
CVSS 3.1 MEDIUM 6.3· Adjacent network · No auth · User interaction · EPSS 0.00464 · Published 2022-09-23 · No fix listed CWE-287
Open these records in search → All records by CVSS severity
Critical0 High2 Medium2 Low0 No CVSS0