Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Meteocontrol Clear all filters
TI-2016-03875 CVE-2016-4504 · GHSA-ggpw-5qfx-mxxj

Cross-site request forgery in Meteocontrol WEB'log

Priority LOW 39

A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and Pro Unlimited all versions.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00494 Published 2017-03-21 No fix listed CWE-352
TI-2016-02066 CVE-2016-2296 · GHSA-g7wf-vfjj-8q52

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require…

Priority HIGH 76

Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pages, which allows remote attackers to obtain sensitive information or modify data via unspecified vec…

CVSS 3.0CRITICAL 9.4 Network No auth No interaction EPSS 0.6426 Published 2016-05-14 No fix listed CWE-254