Vulnerabilities

TI-2017-10196 CVE-2017-14013 · GHSA-7h4f-h4v7-62j6

A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent…

LOW 27

A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface.

CVSS 3.0MEDIUM 5.6 Network No auth No interaction EPSS 0.00934 Published 2017-10-17 No fix listed CWE-602

TI-2017-10194 CVE-2017-14011 · GHSA-f6m9-f3qm-rvhc

LOW 39

A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00641 Published 2017-10-17 No fix listed CWE-352

TI-2017-10192 CVE-2017-14009 · GHSA-hwf3-jmw4-9hxh

LOW 30

An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0073 Published 2017-10-17 No fix listed CWE-200

TI-2017-10190 CVE-2017-14007 · GHSA-jrvx-j527-53gx

LOW 27

An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface.

CVSS 3.0MEDIUM 5.6 Network No auth No interaction EPSS 0.00907 Published 2017-10-17 No fix listed CWE-613

TI-2017-10188 CVE-2017-14005 · GHSA-wwgw-fwm7-pq39

MEDIUM 41

An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01363 Published 2017-10-17 No fix listed CWE-620