cynet records
4 published records for vendor cynet.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2022-27967No exploit | Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded files and profiles via a crafted GET requestcynet · cynet 360 | Medium5.3 | — | 0.7% | Sep 8, 2022 |
21Monitor | CVE-2022-27968No exploit | Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via a crafted GET requescynet · cynet 360 | Medium5.3 | — | 0.7% | Sep 8, 2022 |
21Monitor | CVE-2022-27969No exploit | Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET request sent to /WebAppcynet · cynet 360 | Medium5.3 | — | 0.7% | Sep 8, 2022 |
17Monitor | CVE-2023-27247No exploit | Cynet Client Agent v4.6.0.8010 allows attackers with Administrator rights to disable the EDR functions by disabling process privilege tokenscynet · client agent · CWE-250 | Medium4.4 | — | 0.2% | Mar 28, 2023 |
- CVE-2022-2796721Monitor
Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of excluded files and profiles via a crafted GET request
MediumCVSS 5.3No exploitEPSS 0%cynet · cynet 360Sep 8, 2022
- CVE-2022-2796821Monitor
Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of monitored files and profiles via a crafted GET reques
MediumCVSS 5.3No exploitEPSS 0%cynet · cynet 360Sep 8, 2022
- CVE-2022-2796921Monitor
Cynet 360 Web Portal before v4.5 was discovered to allow attackers to access a list of decoy users via a crafted GET request sent to /WebApp
MediumCVSS 5.3No exploitEPSS 0%cynet · cynet 360Sep 8, 2022
- CVE-2023-2724717Monitor
Cynet Client Agent v4.6.0.8010 allows attackers with Administrator rights to disable the EDR functions by disabling process privilege tokens
MediumCVSS 4.4No exploitEPSS 0%cynet · client agentMar 28, 2023