Xceedium

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xceedium records in CISA KEV

No Xceedium vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Xsuite 6 records MEDIUM

Records

6 records in Xsuite · all components

TI-2015-03903 CVE-2015-4664 · GHSA-658r-rq3p-fwrx

Improper input validation in CA Privileged Access Manager

MEDIUM 61

An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.20195 Published 2018-06-18 No fix listed CWE-20

TI-2015-03906 CVE-2015-4667 · GHSA-p476-69jg-2436

Multiple hardcoded credentials in Xsuite 2.x.

MEDIUM 55

Multiple hardcoded credentials in Xsuite 2.x.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.11118 Published 2017-09-25 No fix listed CWE-798

TI-2015-03905 CVE-2015-4666 · GHSA-v46w-rfmj-gcqr

Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5…

LOW 39

Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrary files via a ....// (quadruple dot double slash) in the logFile parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.16235 Published 2015-08-13 No fix listed CWE-22

TI-2015-03907 CVE-2015-4668 · GHSA-vx7g-39p9-2r2g

Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to…

LOW 37

Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.06719 Published 2017-09-25 No fix listed CWE-601

TI-2015-03908 CVE-2015-4669 · GHSA-5738-w455-jqx4

The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local…

LOW 36

The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01051 Published 2017-09-25 No fix listed CWE-89

TI-2015-03904 CVE-2015-4665 · GHSA-qw5p-wg9c-j8fw

Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and…

LOW 26

Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the fileName parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03308 Published 2015-08-13 No fix listed CWE-79

Open these records in search →

Critical	2
High	1
Medium	3
Low	0
No CVSS	0