Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Celestialsoftware Clear all filters
TI-2020-19301 CVE-2020-37166 · GHSA-vp6j-grx7-8jmx

AbsoluteTelnet 11.12 - 'SSH2/username' Denial of Service

Priority MEDIUM 64

AbsoluteTelnet 11.12 contains a denial of service vulnerability in the SSH2 username input field that allows local attackers to crash the application.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00237 Published 2026-02-06 No fix listed CWE-120
TI-2020-19300 CVE-2020-37165 · GHSA-7g58-8gc4-vxgv

AbsoluteTelnet 11.12 - "license name" Denial of Service

Priority MEDIUM 63

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00246 Published 2026-02-06 No fix listed CWE-120
TI-2020-19299 CVE-2020-37164 · GHSA-rxg7-8jf3-7h9x

AbsoluteTelnet 11.12 - "license entry" Denial of Service

Priority MEDIUM 63

AbsoluteTelnet 11.12 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized license name.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00246 Published 2026-02-06 No fix listed CWE-120
TI-2021-22381 CVE-2021-47765 · GHSA-chp4-5883-3f2x

AbsoluteTelnet 11.24 - 'Username' Denial of Service (PoC)

Priority MEDIUM 63

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating username and error report fields.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00194 Published 2026-01-15 No fix listed CWE-787
TI-2021-22380 CVE-2021-47764 · GHSA-g9m3-654m-8943

AbsoluteTelnet 11.24 - 'Phone' Denial of Service (PoC)

Priority MEDIUM 63

AbsoluteTelnet 11.24 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating DialUp connection and license name fields.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00194 Published 2026-01-15 No fix listed CWE-787