Opswat
Opswat Metadefender: vulnerabilidades y CVE
Opswat Metadefender tiene 4 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE4
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-40778 | Media (5.4) | 0.47% | — | 19 sept 2022 | A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML because of the blocked page response. |
| CVE-2022-32272 | Crítica (9.8) | 9.6% | — | 9 jun 2022 | OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation. |
| CVE-2022-32273 | Media (4.3) | 0.78% | — | 8 jun 2022 | As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate filenames on the server. |
| CVE-2018-16275 | Alta (7.8) | 0.95% | — | 31 ago 2018 | OPSWAT MetaDefender before v4.11.2 allows CSV injection. |