Vulnerabilities

TI-2020-16170 CVE-2020-26527 · GHSA-5xmj-hp6w-j5r5

An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7.

MEDIUM 44

An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00912 Published 2020-10-02 No fix listed CWE-346

TI-2020-16169 CVE-2020-26526 · GHSA-38c2-vx55-m3wp

LOW 27

An issue was discovered in Damstra Smart Asset 2020.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01467 Published 2020-10-02 No fix listed

TI-2020-16168 CVE-2020-26525 · GHSA-9845-gph5-8ccg

MEDIUM 61

Damstra Smart Asset 2020.7 has SQL injection via the API/api/Asset originator parameter.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.25499 Published 2020-10-02 No fix listed CWE-89