Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: Infinite Automation Systems Clear all filters
TI-2015-06573 CVE-2015-7904 · GHSA-r5vj-6v5w-753q

Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and…

Priority LOW 34

Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02783 Published 2015-10-28 No fix listed
TI-2015-06569 CVE-2015-7900 · GHSA-ww9v-c5vx-pcg3

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote…

Priority LOW 25

Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and then visiting a certain…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02946 Published 2015-10-28 No fix listed CWE-200
TI-2015-05453 CVE-2015-6493 · GHSA-9gwg-ggxq-h528

Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation…

Priority LOW 33

Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to hijack the authentication of unspecified victims via un…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01323 Published 2015-10-28 No fix listed CWE-352