Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: syslink software AG Clear all filters
TI-2026-07621 CVE-2026-8672 · GHSA-hhj7-5v62-787q

Default credentials for internal DB

Priority LOW 22

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords.

CVSS 3.1MEDIUM 5.1 Local High privileges No interaction EPSS 0.00105 Published 2026-05-22 Fixed in 25.3.0 CWE-1393
TI-2026-07620 CVE-2026-8671 · GHSA-5qp4-pv6p-8gcx

Log Files contain encrypted secrets

Priority LOW 32

Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure.

CVSS 3.1HIGH 7.5 Adjacent network High privileges No interaction EPSS 0.00216 Published 2026-05-22 Fixed in 25.3.0 CWE-532
TI-2026-07619 CVE-2026-8670 · GHSA-rvw7-wx4g-rq78

Insecure session handling on metrics web server

Priority MEDIUM 42

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00216 Published 2026-05-22 Fixed in 25.3.1 CWE-613
TI-2026-03353 CVE-2026-3873 · GHSA-q26g-448c-9p4x

Legacy built-in user account

Priority LOW 37

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00233 Published 2026-03-13 Fixed in 25.3.0 CWE-798