Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Veraxsystems records in CISA KEVNo Veraxsystems vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 42
Verax NMS prior to 2.1.0 has multiple security bypass vulnerabilities
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01514 · Published 2020-01-30 · No fix listed CWE-863
Priority LOW 35
Verax NMS prior to 2.1.0 uses an encryption key that is hardcoded in a JAR archive.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01307 · Published 2020-01-30 · No fix listed CWE-798
Priority LOW 30
Verax NMS prior to 2.10 allows authentication via the encrypted password without knowing the cleartext password.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02008 · Published 2020-01-30 · No fix listed CWE-294
Priority LOW 27
Verax NMS prior to 2.1.0 leaks connection details when any user executes a Repair Table action
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01315 · Published 2020-01-30 · No fix listed CWE-200
Open these records in search →