Vulnerabilities

TI-2023-04298 CVE-2023-4665 · GHSA-7whq-5h6m-qw8q

Privilage Escalation in Saphira Connect

MEDIUM 42

Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01145 Published 2023-09-15 Fixed in 9 CWE-279

TI-2023-04297 CVE-2023-4664 · GHSA-5qrf-4c4q-429h

MEDIUM 40

Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege Escalation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01007 Published 2023-09-15 Fixed in 9 CWE-276

TI-2023-04296 CVE-2023-4663 · GHSA-vm6h-6m45-hfp7

LOW 29

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Saphira Saphira Connect allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00981 Published 2023-09-15 Fixed in 9 CWE-80

TI-2023-04295 CVE-2023-4662 · GHSA-vfwh-2959-9h69

MEDIUM 51

Execution with Unnecessary Privileges vulnerability in Saphira Saphira Connect allows Remote Code Inclusion.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01282 Published 2023-09-15 Fixed in 9 CWE-250

TI-2023-04294 CVE-2023-4661 · GHSA-2mfc-5569-842h

MEDIUM 51

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saphira Saphira Connect allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01002 Published 2023-09-15 Fixed in 9 CWE-89