Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: VISAM VBASE 11.7.5 Clear all filters
TI-2022-22426 CVE-2022-45468 · GHSA-f3qx-xrcx-25gj

XML external entity injection in VISAM VBASE

Priority LOW 28

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01761 Published 2023-03-21 Fixed in 11.7.5 CWE-611
TI-2022-22199 CVE-2022-45121 · GHSA-qgq2-9mq2-x25j

XML external entity injection in VISAM VBASE

Priority LOW 24

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00255 Published 2023-03-21 Fixed in 11.7.5 CWE-611
TI-2022-20088 CVE-2022-41696 · GHSA-jq6w-j2rm-c2qq

XML external entity injection in VISAM VBASE

Priority LOW 24

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00255 Published 2023-03-21 Fixed in 11.7.5 CWE-611
TI-2022-21294 CVE-2022-43512 · GHSA-3457-wmr8-rfxc

XML external entity injection in VISAM VBASE

Priority LOW 24

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00255 Published 2023-03-21 Fixed in 11.7.5 CWE-611
TI-2022-22847 CVE-2022-46300 · GHSA-pvf4-hr84-4g6r

XML external entity injection in VISAM VBASE

Priority LOW 32

Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.04148 Published 2023-03-21 Fixed in 11.7.5 CWE-611