Vulnerabilities

TI-2023-28390 CVE-2023-51751 · GHSA-r79x-6p7r-6ghx

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4…

LOW 33

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00186 Published 2024-01-11 No fix listed CWE-284

TI-2023-28389 CVE-2023-51750 · GHSA-8fmw-7mxc-55jq

LOW 23

ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads can occur.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00286 Published 2024-01-11 No fix listed CWE-286

TI-2023-28388 CVE-2023-51749 · GHSA-r65x-5fp7-9m76

LOW 38

ScaleFusion 10.5.2 does not properly limit users to the Edge application because a search can be made from a tooltip.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00309 Published 2024-01-11 No fix listed

TI-2023-28387 CVE-2023-51748 · GHSA-hgx9-j24r-974q

HIGH 73

ScaleFusion 10.5.2 does not properly limit users to the Edge application because Ctrl-O and Ctrl-S can be used.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00309 Published 2024-01-11 No fix listed CWE-693

TI-2023-27404 CVE-2023-50159 · GHSA-5g6p-48pg-5m6f

MEDIUM 40

In ScaleFusion (Windows Desktop App) agent 10.5.2, Kiosk mode application restrictions can be bypassed allowing arbitrary code to be executed.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00286 Published 2024-01-11 No fix listed CWE-284