Vulnerabilities

TI-2022-17551 CVE-2022-37772 · GHSA-4xrx-h5ww-f9ph

Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication…

LOW 35

Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication attempts due to excessive verbose responses from the application.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01209 Published 2022-11-23 No fix listed CWE-307

TI-2022-17553 CVE-2022-37774 · GHSA-fcjq-9fhq-v247

There is a broken access control vulnerability in the Maarch RM 2.8.3 solution.

LOW 31

There is a broken access control vulnerability in the Maarch RM 2.8.3 solution.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00575 Published 2022-11-22 No fix listed CWE-287

TI-2022-17552 CVE-2022-37773 · GHSA-vx27-mvqf-w85x

An authenticated SQL Injection vulnerability in the statistics page…

MEDIUM 62

An authenticated SQL Injection vulnerability in the statistics page (/statistics/retrieve) of Maarch RM 2.8, via the filter parameter, allows the complete disclosure of all databases.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00786 Published 2022-11-22 No fix listed CWE-89

TI-2019-11917 CVE-2019-15854 · GHSA-wc23-6g3m-fg2v

An issue was discovered in Maarch RM before 2.5.

MEDIUM 41

An issue was discovered in Maarch RM before 2.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01283 Published 2020-01-17 No fix listed

TI-2019-11918 CVE-2019-15855 · GHSA-gm75-8c8w-xvmw

An issue was discovered in Maarch RM before 2.5.

MEDIUM 42

An issue was discovered in Maarch RM before 2.5.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01508 Published 2020-01-17 No fix listed CWE-22

Vulnerabilities

Filters

Maarch RM 2.8.3 solution contains an improper restriction of excessive authentication…

There is a broken access control vulnerability in the Maarch RM 2.8.3 solution.

An authenticated SQL Injection vulnerability in the statistics page…

An issue was discovered in Maarch RM before 2.5.

An issue was discovered in Maarch RM before 2.5.