Vulnerabilities

TI-2023-22403 CVE-2023-42035 · GHSA-rmmq-5px8-wwpm

XML external entity injection in Visualware MyConnection Server

LOW 37

Visualware MyConnection Server doIForward XML External Entity Processing Information Disclosure Vulnerability.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.01243 Published 2024-05-03 No fix listed CWE-611

TI-2023-22402 CVE-2023-42034 · GHSA-2wqr-hc5g-8c36

Cross-site scripting in Visualware MyConnection Server

MEDIUM 43

Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerability.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01365 Published 2024-05-03 No fix listed CWE-79

TI-2023-22401 CVE-2023-42033 · GHSA-vcp3-4359-23x2

Path traversal in Visualware MyConnection Server

LOW 39

Visualware MyConnection Server doPostUploadfiles Directory Traversal Remote Code Execution Vulnerability.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.0327 Published 2024-05-03 No fix listed CWE-22

TI-2023-22400 CVE-2023-42032 · GHSA-64x5-q392-w4xh

Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information…

MEDIUM 41

Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure Vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01246 Published 2024-05-03 No fix listed CWE-749

TI-2021-08745 CVE-2021-27198 · GHSA-q9xv-9vww-9m7g

An issue was discovered in Visualware MyConnection Server before v11.1a.

MEDIUM 56

An issue was discovered in Visualware MyConnection Server before v11.1a.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.12687 Published 2021-02-26 No fix listed CWE-434

TI-2021-08992 CVE-2021-27509 · GHSA-5h45-5f8r-3vx5

In Visualware MyConnection Server before 11.0b build 5382, each published report is not…

LOW 35

In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01007 Published 2021-02-19 No fix listed CWE-863

TI-2015-01832 CVE-2015-2043 · GHSA-4vvp-mmqw-cp8p

Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the (1) bt, (2) variable, or (3) et parameter to myspeed/db/his…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01012 Published 2015-02-25 No fix listed CWE-79

TI-2014-04184 CVE-2014-5113 · GHSA-68cf-fqcp-pmj9

Multiple cross-site scripting (XSS) vulnerabilities in test.php in Visualware…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the (1) testtype, (2) ver, (3) cm, (4) map, (5) lin…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01854 Published 2014-07-28 No fix listed CWE-79

Vulnerabilities

Filters