Vulnerabilities

TI-2025-00296 CVE-2025-0364 · GHSA-cmgj-xph9-cc49

BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE

HIGH 82

BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0193 Published 2025-02-04 No fix listed CWE-288

TI-2022-09673 CVE-2022-26281 · GHSA-m2fc-hwv4-8747

BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.

LOW 35

BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00949 Published 2022-04-05 No fix listed CWE-311

TI-2022-07452 CVE-2022-23345 · GHSA-qvpm-g7wj-8g8g

BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.

LOW 36

BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01554 Published 2022-03-21 No fix listed CWE-306

TI-2022-07453 CVE-2022-23346 · GHSA-6xx9-mf64-2gc5

BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.

MEDIUM 41

BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01404 Published 2022-03-21 No fix listed CWE-434

TI-2022-07458 CVE-2022-23352 · GHSA-2gg3-23vh-j2pg

An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).

LOW 36

An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01607 Published 2022-03-21 No fix listed CWE-835

TI-2022-07455 CVE-2022-23348 · GHSA-cxpw-9682-4rmh

BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.

LOW 30

BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.03273 Published 2022-03-21 No fix listed CWE-916

TI-2022-07457 CVE-2022-23350 · GHSA-m2xp-9p4f-fp5r

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.

LOW 25

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00607 Published 2022-03-21 No fix listed CWE-79

TI-2022-07456 CVE-2022-23349 · GHSA-c7hm-9h34-5g4x

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).

LOW 39

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00652 Published 2022-03-21 No fix listed CWE-352

TI-2022-07454 CVE-2022-23347 · GHSA-65p8-cv89-24c7

BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.

MEDIUM 48

BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.13483 Published 2022-03-21 No fix listed CWE-22

TI-2009-04417 CVE-2009-4661 · GHSA-3xr6-6369-7394

Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted…

LOW 24

Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service (application crash) via a crafted ZIP file that is not properly handled when the victim us…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02095 Published 2010-03-03 No fix listed CWE-119

Vulnerabilities

Filters