Vulnerabilities

TI-2022-23662 CVE-2022-47634 · GHSA-8p8p-qfhf-2jj8

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows…

LOW 38

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00505 Published 2023-01-01 No fix listed CWE-284

TI-2022-23622 CVE-2022-47581 · GHSA-c242-f467-9g2v

Isode M-Vault 16.0v0 through 17.x before 17.0v24 can crash upon an LDAP v1 bind request.

LOW 34

Isode M-Vault 16.0v0 through 17.x before 17.0v24 can crash upon an LDAP v1 bind request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00657 Published 2022-12-21 No fix listed

TI-2022-14069 CVE-2022-32389 · GHSA-wfxr-7w34-vgf9

Isode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry…

LOW 34

Isode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry Editor.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00583 Published 2022-07-14 No fix listed CWE-798

TI-2014-02193 CVE-2014-2742 · GHSA-qg9x-3pcv-mff7

Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML…

LOW 38

Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream, aka an "xmppbo…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.01799 Published 2014-04-11 No fix listed CWE-264

TI-2012-03977 CVE-2012-4669 · GHSA-2fc3-2632-rc34

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was…

LOW 28

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were n…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00875 Published 2012-08-25 No fix listed CWE-20

TI-2006-00689 CVE-2006-0710 · GHSA-3hr8-3rcw-m7v7

Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote…

MEDIUM 40

Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code via a crafted LDAP request, as demonstrated by ProtoVer Sample LDAP.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0454 Published 2006-02-15 No fix listed CWE-119

Vulnerabilities

Filters

M-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows…

Isode M-Vault 16.0v0 through 17.x before 17.0v24 can crash upon an LDAP v1 bind request.

Isode SWIFT v4.0.2 was discovered to contain hard-coded credentials in the Registry…

Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML…

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was…

Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote…