Vulnerabilities

TI-2018-13654 CVE-2018-19234 · GHSA-g3m7-g22h-m88g

The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0…

MEDIUM 44

The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03296 Published 2018-12-20 No fix listed CWE-494

TI-2018-13653 CVE-2018-19233 · GHSA-3vv5-prrw-675q

COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute…

LOW 35

COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00592 Published 2018-12-20 No fix listed CWE-798

Vulnerabilities

Filters

The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0…

COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute…