Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Efstechnology Clear all filters
TI-2012-02881 CVE-2012-3347 · GHSA-c8cc-954v-xv37

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX…

Priority LOW 30

AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and t…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.01527 Published 2012-06-13 No fix listed CWE-264
TI-2012-01612 CVE-2012-1828 · GHSA-w94q-728v-qj2f

The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization…

Priority LOW 32

The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden functi…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01556 Published 2012-06-13 No fix listed CWE-264
TI-2012-01611 CVE-2012-1827 · GHSA-f2p9-q5wx-c2xv

The web service in AutoFORM PDM Archive before 7.1 does not have authorization…

Priority LOW 32

The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQue…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01556 Published 2012-06-13 No fix listed CWE-264