WithSecure

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

WithSecure records in CISA KEV

No WithSecure vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Elements Endpoint Protection 13 records MEDIUM Client Security 12 records MEDIUM Email And Server Security 12 records MEDIUM Server Security 12 records MEDIUM Atlant 9 records MEDIUM Linux Protection 9 records MEDIUM Linux Security 64 9 records MEDIUM F-secure Policy Manager 4 records MEDIUM

Records

4 records in F-secure Policy Manager · all components

TI-2023-23461 CVE-2023-43762 · GHSA-jvv5-74p3-9q8j

Certain WithSecure products allow Unauthenticated Remote Code Execution via the web…

MEDIUM 52

Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01357 Published 2023-09-22 No fix listed

TI-2022-17863 CVE-2022-38165 · GHSA-7gc4-cwgf-384p

Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated…

MEDIUM 51

Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in arbitrary locations on the F-Secure Policy Manager Server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00908 Published 2022-11-17 No fix listed CWE-22

TI-2022-17860 CVE-2022-38162 · GHSA-xqrw-f62h-4ff2

Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10)…

LOW 29

Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10) exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00856 Published 2022-10-25 No fix listed CWE-79

TI-2023-23462 CVE-2023-43763 · GHSA-4c22-9q7h-jv2g

Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint.

LOW 27

Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00357 Published 2023-09-22 No fix listed CWE-79

Open these records in search →

Critical	2
High	14
Medium	3
Low	1
No CVSS	0