Read the docs

VISAM

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

VISAM records in CISA KEV

No VISAM vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records in Vbase Editor · all components

Priority MEDIUM 47

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffer overflow, which may lead to a denial-of-service condition and execution of ar…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02579 Published 2020-04-03 No fix listed CWE-121
Priority LOW 38

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in elevation of privileges or malicious effects on the system the next time a privil…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00372 Published 2020-04-03 No fix listed CWE-276
TI-2020-05656 CVE-2020-7008 · GHSA-r83v-qp7q-q6cf

Path traversal in VISAM VBASE Editor

Priority LOW 37

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01907 Published 2020-04-03 No fix listed CWE-23
Priority LOW 35

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from the web server and gain information about the login and the encryption/decrypti…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01116 Published 2020-04-03 No fix listed CWE-922
Priority LOW 34

VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a local attacker to bypass the password-protected mechanism through brute-force attack…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00251 Published 2020-04-03 No fix listed CWE-326
Open these records in search →