ArticaTech records
17 published records for vendor articatech.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 3 · 17.6%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-288 Authentication Bypass Using an Alternate Path or Channel2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-502 Deserialization of Untrusted Data1
The weakness classes this vendor ships most often: where to look.
CWEAll records
17 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
67This week | CVE-2020-17506Weaponized | Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQarticatech · web proxy · CWE-89 | Critical9.8 | — | 93.9% | Aug 12, 2020 |
63This week | CVE-2024-2054Weaponized | Artica Proxy Unauthenticated PHP Deserialization Vulnerabilityarticatech · artica proxy · CWE-502 | Critical9.8 | — | 81.2% | Mar 20, 2024 |
60This week | CVE-2020-17505Weaponized | Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php.articatech · web proxy · CWE-78 | High8.8 | — | 82.1% | Aug 12, 2020 |
46Plan | CVE-2020-13158Proof of concept | Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.articatech · artica proxy · CWE-22 | High7.5 | — | 53.9% | Jun 22, 2020 |
44Plan | CVE-2024-2056No exploit | Artica Proxy Loopback Services Remotely Accessible Unauthenticatedarticatech · artica proxy · CWE-288 | Critical9.8 | — | 16.7% | Mar 5, 2024 |
43Plan | CVE-2024-2053Proof of concept | Artica Proxy Unauthenticated LFI Protection Bypass Vulnerabilityarticatech · artica proxy · CWE-23 | High7.5 | — | 44.5% | Mar 20, 2024 |
42Plan | CVE-2020-13159Proof of concept | Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostnaarticatech · artica proxy · CWE-78 | Critical9.8 | — | 9.3% | Jun 22, 2020 |
40Plan | CVE-2021-41739No exploit | A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000.articatech · artica proxy · CWE-78 | Critical9.8 | — | 2.5% | May 5, 2022 |
39Monitor | CVE-2017-17055Proof of concept | Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) attarticatech · artica proxy · CWE-78 | Critical9.0 | — | 8.7% | Dec 6, 2017 |
39Monitor | CVE-2024-2055No exploit | Artica Proxy Unauthenticated File Manager Vulnerabilityarticatech · artica proxy · CWE-288 | Critical9.8 | — | 0.9% | Mar 5, 2024 |
32Monitor | CVE-2021-40680No exploit | There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP27articatech · web proxy · CWE-22 | High8.1 | — | 1.3% | Apr 25, 2022 |
31Monitor | CVE-2020-15052Proof of concept | An issue was discovered in Artica Proxy CE before 4.28.030.418.articatech · artica proxy · CWE-89 | High7.5 | — | 2.1% | Jul 20, 2020 |
29Monitor | CVE-2020-10818No exploit | Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field.articatech · artica proxy · CWE-78 | High7.2 | — | 2.9% | Mar 22, 2020 |
29Monitor | CVE-2019-7300No exploit | Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin andarticatech · artica proxy · CWE-522 | High7.2 | — | 2.7% | Feb 1, 2019 |
25Monitor | CVE-2020-15051Proof of concept | An issue was discovered in Artica Proxy before 4.30.000000.articatech · artica proxy · CWE-79 | Medium6.1 | — | 2.4% | Jul 15, 2020 |
25Monitor | CVE-2020-15053Proof of concept | An issue was discovered in Artica Proxy CE before 4.28.030.418.articatech · artica proxy · CWE-79 | Medium6.1 | — | 1.8% | Jul 20, 2020 |
24Monitor | CVE-2022-37153Proof of concept | An issue was discovered in Artica Proxy 4.30.000000.articatech · artica proxy · CWE-79 | Medium6.1 | — | 1.6% | Aug 24, 2022 |
- CVE-2020-1750667This week
Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQ
CriticalCVSS 9.8WeaponizedEPSS 93%articatech · web proxyAug 12, 2020
- CVE-2024-205463This week
Artica Proxy Unauthenticated PHP Deserialization Vulnerability
CriticalCVSS 9.8WeaponizedEPSS 81%articatech · artica proxyMar 20, 2024
- CVE-2020-1750560This week
Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php.
HighCVSS 8.8WeaponizedEPSS 82%articatech · web proxyAug 12, 2020
- CVE-2020-1315846Plan
Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.
HighCVSS 7.5Proof of conceptEPSS 53%articatech · artica proxyJun 22, 2020
- CVE-2024-205644Plan
Artica Proxy Loopback Services Remotely Accessible Unauthenticated
CriticalCVSS 9.8No exploitEPSS 16%articatech · artica proxyMar 5, 2024
- CVE-2024-205343Plan
Artica Proxy Unauthenticated LFI Protection Bypass Vulnerability
HighCVSS 7.5Proof of conceptEPSS 44%articatech · artica proxyMar 20, 2024
- CVE-2020-1315942Plan
Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostna
CriticalCVSS 9.8Proof of conceptEPSS 9%articatech · artica proxyJun 22, 2020
- CVE-2021-4173940Plan
A OS Command Injection vulnerability was discovered in Artica Proxy 4.30.000000.
CriticalCVSS 9.8No exploitEPSS 2%articatech · artica proxyMay 5, 2022
- CVE-2017-1705539Monitor
Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) att
CriticalCVSS 9.0Proof of conceptEPSS 8%articatech · artica proxyDec 6, 2017
- CVE-2024-205539Monitor
Artica Proxy Unauthenticated File Manager Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%articatech · artica proxyMar 5, 2024
- CVE-2021-4068032Monitor
There is a Directory Traversal vulnerability in Artica Proxy (4.30.000000 SP206 through SP255, and VMware appliance 4.30.000000 through SP27
HighCVSS 8.1No exploitEPSS 1%articatech · web proxyApr 25, 2022
- CVE-2020-1505231Monitor
An issue was discovered in Artica Proxy CE before 4.28.030.418.
HighCVSS 7.5Proof of conceptEPSS 2%articatech · artica proxyJul 20, 2020
- CVE-2020-1081829Monitor
Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field.
HighCVSS 7.2No exploitEPSS 2%articatech · artica proxyMar 22, 2020
- CVE-2019-730029Monitor
Artica Proxy 3.06.200056 allows remote attackers to execute arbitrary commands as root by reading the ressources/settings.inc ldap_admin and
HighCVSS 7.2No exploitEPSS 2%articatech · artica proxyFeb 1, 2019
- CVE-2020-1505125Monitor
An issue was discovered in Artica Proxy before 4.30.000000.
MediumCVSS 6.1Proof of conceptEPSS 2%articatech · artica proxyJul 15, 2020
- CVE-2020-1505325Monitor
An issue was discovered in Artica Proxy CE before 4.28.030.418.
MediumCVSS 6.1Proof of conceptEPSS 1%articatech · artica proxyJul 20, 2020
- CVE-2022-3715324Monitor
An issue was discovered in Artica Proxy 4.30.000000.
MediumCVSS 6.1Proof of conceptEPSS 1%articatech · artica proxyAug 24, 2022