klinzmann records

3 published records for vendor klinzmann.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2009-1465No exploit	Application Access Server (A-A-S) 2.0.48 has "wildbat" as its default password for the admin account, which makes it easier for remote attacklinzmann · application access server · CWE-255 Pre-auth Hard-coded credentials	High7.5	—	1.4%	May 14, 2009
27Monitor	CVE-2009-1464No exploit	Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers tklinzmann · application access server · CWE-352 pre-auth RCE CSRF	Medium6.8	—	0.7%	May 14, 2009
22Monitor	CVE-2009-1466No exploit	Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to klinzmann · application access server · CWE-312	Medium5.5	—	0.2%	May 14, 2009

CVE-2009-1465
30Monitor
Application Access Server (A-A-S) 2.0.48 has "wildbat" as its default password for the admin account, which makes it easier for remote attac
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
klinzmann · application access serverMay 14, 2009
CVE-2009-1464
27Monitor
Multiple cross-site request forgery (CSRF) vulnerabilities in index.aas in Application Access Server (A-A-S) 2.0.48 allow remote attackers t
MediumCVSS 6.8No exploitEPSS 0%
- pre-auth RCE
- CSRF
klinzmann · application access serverMay 14, 2009
CVE-2009-1466
22Monitor
Application Access Server (A-A-S) 2.0.48 stores (1) passwords and (2) the port keyword in cleartext in aas.ini, which allows local users to
MediumCVSS 5.5No exploitEPSS 0%
klinzmann · application access serverMay 14, 2009