Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority MEDIUM 41

A CWE 502: Deserialization of Untrusted Data vulnerability exists that could allow code to be remotely executed on the server when unsafely deserialized data is posted to the web server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00537 Published 2023-01-30 Fixed in V7.9.0 CWE-502
Priority MEDIUM 44

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00532 Published 2023-01-30 Fixed in V7.9.0 CWE-522
Priority MEDIUM 43

A CWE-257: Storing Passwords in a Recoverable Format vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00472 Published 2023-01-30 Fixed in V7.9.0 CWE-257
Priority MEDIUM 44

A CWE-522: Insufficiently Protected Credentials vulnerability exists that could result in unwanted access to a DCE instance when performed over a network by a malicious third-party.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00532 Published 2023-01-30 Fixed in V7.9.0 CWE-522