Priority MEDIUM 56
Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application.
CVSS 4.0MEDIUM 5.1· Local · High privileges · User interaction · EPSS 0.00536 · Published 2026-01-13 · No fix listed CWE-1284
Priority HIGH 81
Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.04742 · Published 2025-08-13 · Fixed in 5.55 CWE-121
Priority HIGH 77
A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0194 · Published 2025-08-05 · No fix listed CWE-248
Priority HIGH 72
Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH packets.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00529 · Published 2025-03-05 · No fix listed CWE-400
Priority MEDIUM 60
Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter.
CVSS 3.1MEDIUM 6.1· Network · Low privileges · User interaction · EPSS 0.00311 · Published 2024-12-02 · No fix listed CWE-79
Priority LOW 31
When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfile_name1.htm form to a length of 368 or more bytes.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0095 · Published 2020-08-19 · No fix listed CWE-119
Priority LOW 28
An issue was discovered in Sysax Multi Server 6.90.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01916 · Published 2020-06-02 · No fix listed CWE-22
Priority LOW 33
An issue was discovered in Sysax Multi Server 6.90.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03153 · Published 2020-06-02 · No fix listed CWE-79
Priority MEDIUM 41
An issue was discovered in Sysax Multi Server 6.90.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01648 · Published 2020-06-02 · No fix listed CWE-384
Priority MEDIUM 61
Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.
CVSS 2.0HIGH 7.1· Network · Low privileges · Interaction — · EPSS 0.46074 · Published 2013-01-31 · No fix listed CWE-119
Priority LOW 23
Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.01934 · Published 2010-04-22 · No fix listed CWE-22
Priority MEDIUM 45
Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modify arbitrary files via crafted FTP commands.
CVSS 2.0HIGH 9.0· Network · Low privileges · Interaction — · EPSS 0.03905 · Published 2010-04-22 · No fix listed CWE-22
THREATIST.IORead the docs