Vendors / Vxsearch Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 3 CVSS 7.0–8.9
Exploited now Vxsearch records in CISA KEV No Vxsearch vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 69
VX Search v13.8 and v14.7 was discovered to contain an unquoted service path vulnerability which allows attackers to execute arbitrary commands at elevated privileges via a crafted executable file.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00378 · Published 2023-03-16 · No fix listed CWE-428
Priority MEDIUM 56
Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11726 · Published 2017-08-31 · No fix listed CWE-119
Open these records in search → All records by CVSS severity
Critical1 High3 Medium0 Low0 No CVSS0