Vulnerabilities

TI-2019-10797 CVE-2019-14478 · GHSA-gvh6-x6fv-8cqf

AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the…

LOW 25

AdRem NetCrunch 10.6.0.4587 has a stored Cross-Site Scripting (XSS) vulnerability in the NetCrunch web client.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00576 Published 2020-12-16 No fix listed CWE-79

TI-2019-10800 CVE-2019-14481 · GHSA-h6g5-q5mh-3mg9

AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the…

LOW 25

AdRem NetCrunch 10.6.0.4587 has a Cross-Site Request Forgery (CSRF) vulnerability in the NetCrunch web client.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00444 Published 2020-12-16 No fix listed CWE-352

TI-2019-10795 CVE-2019-14476 · GHSA-f64w-4rx7-rvrx

AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the…

LOW 30

AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the NetCrunch server.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0084 Published 2020-12-16 No fix listed CWE-918

TI-2019-10798 CVE-2019-14479 · GHSA-cw4x-cxpm-9p3r

AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution.

MEDIUM 45

AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04213 Published 2020-12-16 No fix listed CWE-78

TI-2019-10801 CVE-2019-14482 · GHSA-8m3r-g5w3-m8m2

AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the…

MEDIUM 46

AdRem NetCrunch 10.6.0.4587 has a hardcoded SSL private key vulnerability in the NetCrunch web client.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01803 Published 2020-12-16 No fix listed CWE-798

TI-2019-10802 CVE-2019-14483 · GHSA-m7wj-9xjx-8vhq

AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure.

MEDIUM 42

AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01837 Published 2020-12-16 No fix listed

TI-2019-10799 CVE-2019-14480 · GHSA-32m5-2pgc-wc86

AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the…

MEDIUM 44

AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client, which can lead to an authentication bypass or escalation of privileges.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0113 Published 2020-12-16 No fix listed CWE-200

TI-2019-10796 CVE-2019-14477 · GHSA-37vq-vv4q-ww53

AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user…

LOW 25

AdRem NetCrunch 10.6.0.4587 has Improper Credential Storage since the internal user database is readable by low-privileged users and passwords in the database are weakly encoded or encrypted.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00281 Published 2020-12-16 No fix listed CWE-522

Vulnerabilities

Filters