NEC
NEC Expresscluster X: vulnerabilities and CVEs
NEC Expresscluster X has 19 published vulnerabilities, 0 of them in the last 12 months. 9 are rated critical and 0 are listed by CISA as actively exploited.
CVEs19
Last 12 months0
Critical9
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-39548 | High (8.8) | 0.74% | — | Nov 17, 2023 | CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may… |
| CVE-2023-39547 | High (8.8) | 0.63% | — | Nov 17, 2023 | CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may… |
| CVE-2023-39546 | High (8.8) | 0.63% | — | Nov 17, 2023 | CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may… |
| CVE-2023-39545 | High (8.8) | 0.74% | — | Nov 17, 2023 | CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may… |
| CVE-2023-39544 | High (8.8) | 0.63% | — | Nov 17, 2023 | CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may… |
| CVE-2022-34825 | Critical (9.8) | 1.3% | — | Nov 8, 2022 | Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0… |
| CVE-2022-34824 | Critical (9.8) | 1.2% | — | Nov 8, 2022 | Weak File and Folder Permissions vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0… |
| CVE-2022-34823 | Critical (9.8) | 1.4% | — | Nov 8, 2022 | Buffer overflow vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe… |
| CVE-2022-34822 | Critical (9.8) | 1.5% | — | Nov 8, 2022 | Path traversal vulnerability in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe… |
| CVE-2021-20707 | High (7.5) | 0.99% | — | Nov 3, 2021 | Improper input validation vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier,… |
| CVE-2021-20706 | High (7.5) | 1.1% | — | Nov 3, 2021 | Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER… |
| CVE-2021-20705 | High (7.5) | 1.1% | — | Nov 3, 2021 | Improper input validation vulnerability in the WebManager CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER… |
| CVE-2021-20704 | Critical (9.8) | 2.1% | — | Nov 3, 2021 | Buffer overflow vulnerability in the compatible API with previous versions CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and… |
| CVE-2021-20703 | Critical (9.8) | 2.1% | — | Nov 3, 2021 | Buffer overflow vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X… |
| CVE-2021-20702 | Critical (9.8) | 2.2% | — | Nov 3, 2021 | Buffer overflow vulnerability in the Transaction Server CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X… |
| CVE-2021-20701 | Critical (9.8) | 2.1% | — | Nov 3, 2021 | Buffer overflow vulnerability in the Disk Agent CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3… |
| CVE-2021-20700 | Critical (9.8) | 2.1% | — | Nov 3, 2021 | Buffer overflow vulnerability in the Disk Agent CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and earlier, CLUSTERPRO X 4.3 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 4.3… |
| CVE-2020-17408 | High (7.5) | 69% | — | Sep 10, 2020 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1. Authentication is not required to exploit this vulnerability. The specific flaw exists… |
| CVE-2016-1145 | High (7.5) | 3.8% | — | Jan 30, 2016 | Directory traversal vulnerability in WebManager in NEC EXPRESSCLUSTER X through 3.3 11.31 on Windows and through 3.3 3.3.1-1 on Linux and Solaris allows remote attackers to read arbitrary files via unspecified vectors. |
Other products by NEC
Aterm W300p Firmware · 18Expresscluster X Singleserversafe · 17Aterm Wg1200hp Firmware · 17Aterm Wr8175n Firmware · 16Aterm Wg1800hp2 Firmware · 16Aterm Wr8170n Firmware · 16Aterm Wf300hp Firmware · 16Aterm Wg2200hp Firmware · 16Aterm Wg1800hp Firmware · 16Aterm Wg300hp Firmware · 16Aterm Wg1400hp Firmware · 16Aterm Wg600hp Firmware · 16