Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Areal Topkapi Clear all filters
TI-2024-01023 CVE-2024-1104 · GHSA-w9jf-wgxm-ggqj

Temporary denial of service during a brute force attack

Priority MEDIUM 40

An unauthenticated remote attacker can bypass the brute force prevention mechanism and disturb the webservice for all users.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2024-02-22 No fix listed CWE-307
TI-2023-27545 CVE-2023-50357 · GHSA-682j-m7jh-pj2w

Cross site scripting vulnerability in AREAL SAS Webserv1 ASP Web Site

Priority LOW 24

A cross site scripting vulnerability in the AREAL SAS Websrv1 ASP website allows a remote low-privileged attacker to gain escalated privileges of other non-admin users.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00352 Published 2024-01-31 No fix listed CWE-79
TI-2023-27544 CVE-2023-50356 · GHSA-hgqh-qj43-xfmf

Improper Certificate Validation in AREAL Topkapi Vision (Server)

Priority LOW 31

SSL connections to some LDAP servers are vulnerable to a man-in-the-middle attack due to improper certificate validation in AREAL Topkapi Vision (Server).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00293 Published 2024-01-31 No fix listed CWE-295