Aquaforest records

4 published records for vendor aquaforest.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2020-9325No exploit	Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.aquaforest · tiff server · CWE-22 Pre-auth Path traversal	High7.5	—	1.8%	Mar 18, 2020
30Monitor	CVE-2020-9324No exploit	Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC.aquaforest · tiff server · CWE-522 Pre-auth Info leak	High7.5	—	1.4%	Mar 18, 2020
21Monitor	CVE-2020-9323No exploit	Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx.aquaforest · tiff server · CWE-22 Pre-auth Path traversal	Medium5.3	—	1.6%	Mar 18, 2020
21Monitor	CVE-2023-6352No exploit	Aquaforest TIFF Server default configuration allows access to arbitrary filesaquaforest · tiff server · CWE-22 Pre-auth Auth bypass Path traversal	Medium5.3	—	1.1%	Nov 30, 2023

CVE-2020-9325
31Monitor
Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
aquaforest · tiff serverMar 18, 2020
CVE-2020-9324
30Monitor
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Info leak
aquaforest · tiff serverMar 18, 2020
CVE-2020-9323
21Monitor
Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Path traversal
aquaforest · tiff serverMar 18, 2020
CVE-2023-6352
21Monitor
Aquaforest TIFF Server default configuration allows access to arbitrary files
MediumCVSS 5.3No exploitEPSS 1%
aquaforest · tiff serverNov 30, 2023