Skip to content
Noroxi

best software records

7 published records for vendor best software.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      7 records
      • CVE-2004-1610
        31Monitor

        SalesLogix 6.1 uses client-specified pathnames for writing certain files, which might allow remote authenticated users to create arbitrary f

        HighCVSS 7.5No exploitEPSS 2%

        best software · saleslogixOct 18, 2004

      • CVE-2004-1605
        31Monitor

        SalesLogix 6.1 allows remote attackers to bypass authentication by modifying the slxweb cookie to set user=Admin, teams=ADMIN!, and usertype

        HighCVSS 7.5No exploitEPSS 2%

        best software · saleslogixOct 14, 2004

      • CVE-2004-1608
        30Monitor

        SQL injection vulnerability in SalesLogix 6.1 allows remote attackers to execute arbitrary SQL statements via the id parameter in a view ope

        HighCVSS 7.5No exploitEPSS 1%

        best software · saleslogixOct 18, 2004

      • CVE-2004-1606
        26Monitor

        slxweb.dll in SalesLogix 6.1 allows remote attackers to cause a denial service (application crash) via an invalid HTTP request, which might

        MediumCVSS 6.4No exploitEPSS 2%

        best software · saleslogixOct 18, 2004

      • CVE-2004-1607
        21Monitor

        slxweb.dll in SalesLogix 6.1 allows remote attackers to obtain sensitive information via a (1) Library or (2) Attachment request with an inv

        MediumCVSS 5.0No exploitEPSS 1%

        best software · saleslogixOct 18, 2004

      • CVE-2004-1609
        21Monitor

        SalesLogix 6.1 includes usernames, passwords, and other sensitive information in the headers of an HTTP response, which could allow remote a

        MediumCVSS 5.0No exploitEPSS 1%

        best software · saleslogixOct 18, 2004

      • CVE-2004-1611
        20Monitor

        SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1)

        MediumCVSS 5.1No exploitEPSS 1%

        best software · saleslogixOct 18, 2004