Vulnerabilities

TI-2023-22403 CVE-2023-42035 · GHSA-rmmq-5px8-wwpm

XML external entity injection in Visualware MyConnection Server

LOW 37

Visualware MyConnection Server doIForward XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.01243 Published 2024-05-03 No fix listed CWE-611

TI-2023-22402 CVE-2023-42034 · GHSA-2wqr-hc5g-8c36

MEDIUM 43

Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01365 Published 2024-05-03 No fix listed CWE-79

TI-2023-22401 CVE-2023-42033 · GHSA-vcp3-4359-23x2

LOW 39

Visualware MyConnection Server doPostUploadfiles Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.0327 Published 2024-05-03 No fix listed CWE-22

TI-2023-22400 CVE-2023-42032 · GHSA-64x5-q392-w4xh

MEDIUM 41

Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01246 Published 2024-05-03 No fix listed CWE-749