Visualware
Visualware Myconnection Server: vulnerabilidades y CVE
Visualware Myconnection Server tiene 8 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE8
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-42035 | Media (6.5) | 1.2% | — | 3 may 2024 | Visualware MyConnection Server doIForward XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of… |
| CVE-2023-42034 | Alta (8.8) | 1.4% | — | 3 may 2024 | Visualware MyConnection Server doRTAAccessCTConfig Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Visualware… |
| CVE-2023-42033 | Alta (7.2) | 3.3% | — | 3 may 2024 | Visualware MyConnection Server doPostUploadfiles Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Visualware… |
| CVE-2023-42032 | Alta (7.5) | 1.2% | — | 3 may 2024 | Visualware MyConnection Server doRTAAccessUPass Exposed Dangerous Method Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of… |
| CVE-2021-27198 | Crítica (9.8) | 14% | — | 26 feb 2021 | An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This… |
| CVE-2021-27509 | Alta (7.5) | 1.0% | — | 19 feb 2021 | In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code. |
| CVE-2015-2043 | Media (4.3) | 1.0% | — | 25 feb 2015 | Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the (1) bt, (2) variable, or (3) et parameter to… |
| CVE-2014-5113 | Media (4.3) | 1.9% | — | 28 jul 2014 | Multiple cross-site scripting (XSS) vulnerabilities in test.php in Visualware MyConnection Server 9.7i allow remote attackers to inject arbitrary web script or HTML via the (1) testtype, (2) ver, (3) cm, (4) map, (5)… |