Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Entes Clear all filters
TI-2018-10656 CVE-2018-14826 · GHSA-r7r8-w5vh-j785

Improper authentication in Entes EMG12

Priority MEDIUM 53

Entes EMG12 versions 2.57 and prior The application uses a web interface where it is possible for an attacker to bypass authentication with a specially crafted URL.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.07744 Published 2018-10-02 No fix listed CWE-287
TI-2018-10652 CVE-2018-14822 · GHSA-r458-wh63-9q54

Information disclosure in Entes EMG12

Priority MEDIUM 47

Entes EMG12 versions 2.57 and prior an information exposure through query strings vulnerability in the web interface has been identified, which may allow an attacker to impersonate a legitimate user and execute arbitrary…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02919 Published 2018-10-02 No fix listed CWE-598