Vendors / Weblogexpert Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Weblogexpert records in CISA KEV No Weblogexpert vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 59
WebLog Expert Web Server Enterprise 9.4 allows Remote Denial Of Service (daemon crash) via a long HTTP Accept Header to TCP port 9991.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.36441 · Published 2018-03-09 · No fix listed CWE-770
Priority LOW 36
\ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog Expert Web Server Enterprise 9.4 has weak permissions (BUILTIN\Users:(ID)C), which allows local users to set a cleartext password and login as admin.
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01083 · Published 2018-03-09 · No fix listed CWE-732
Open these records in search → All records by CVSS severity
0 2 0 0 0
