agilefleet records

7 published records for vendor agilefleet.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2012-4944No exploit	Multiple unrestricted file upload vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to exeagilefleet · fleetcommander pre-auth RCE File upload	Critical10.0	—	3.8%	Nov 18, 2012
31Monitor	CVE-2012-4945No exploit	Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitrary commands via unspecified vectors, relaagilefleet · fleetcommander · CWE-20 pre-auth RCE Command injection	High7.5	—	1.9%	Nov 18, 2012
30Monitor	CVE-2012-4941No exploit	Multiple SQL injection vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitragilefleet · fleetcommander · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.2%	Nov 18, 2012
27Monitor	CVE-2012-4943No exploit	Multiple cross-site request forgery (CSRF) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackeagilefleet · fleetcommander · CWE-352 Pre-auth CSRF	Medium6.8	—	0.7%	Nov 18, 2012
21Monitor	CVE-2012-4947No exploit	Agile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext, which allows remote attackers to obtain sagilefleet · fleetcommander · CWE-310 Pre-auth	Medium5.0	—	1.6%	Nov 18, 2012
20Monitor	CVE-2012-4946No exploit	Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-depenagilefleet · fleetcommander · CWE-310 Pre-auth	Medium5.0	—	1.2%	Nov 18, 2012
17Monitor	CVE-2012-4942No exploit	Multiple cross-site scripting (XSS) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to iagilefleet · fleetcommander · CWE-79 Pre-auth XSS	Medium4.3	—	1.0%	Nov 18, 2012

CVE-2012-4944
41Plan
Multiple unrestricted file upload vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to exe
CriticalCVSS 10.0No exploitEPSS 3%
- pre-auth RCE
- File upload
agilefleet · fleetcommanderNov 18, 2012
CVE-2012-4945
31Monitor
Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitrary commands via unspecified vectors, rela
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- Command injection
agilefleet · fleetcommanderNov 18, 2012
CVE-2012-4941
30Monitor
Multiple SQL injection vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to execute arbitr
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- SQL injection
agilefleet · fleetcommanderNov 18, 2012
CVE-2012-4943
27Monitor
Multiple cross-site request forgery (CSRF) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attacke
MediumCVSS 6.8No exploitEPSS 0%
- Pre-auth
- CSRF
agilefleet · fleetcommanderNov 18, 2012
CVE-2012-4947
21Monitor
Agile FleetCommander and FleetCommander Kiosk before 4.08 store database credentials in cleartext, which allows remote attackers to obtain s
MediumCVSS 5.0No exploitEPSS 1%
- Pre-auth
agilefleet · fleetcommanderNov 18, 2012
CVE-2012-4946
20Monitor
Agile FleetCommander and FleetCommander Kiosk before 4.08 use an XOR format for password encryption, which makes it easier for context-depen
MediumCVSS 5.0No exploitEPSS 1%
- Pre-auth
agilefleet · fleetcommanderNov 18, 2012
CVE-2012-4942
17Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Agile FleetCommander and FleetCommander Kiosk before 4.08 allow remote attackers to i
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
- XSS
agilefleet · fleetcommanderNov 18, 2012