Skip to content
Noroxi

leostream records

5 published records for vendor leostream.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 20
  3. 21
  4. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2020-26574
    39Monitor

    Leostream Connection Broker 8.2.x is affected by stored XSS.

    CriticalCVSS 9.6No exploitEPSS 2%

    leostream · connection brokerOct 6, 2020

  • CVE-2018-18817
    30Monitor

    The Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or earlier allows remote attackers to modify regi

    HighCVSS 7.5No exploitEPSS 1%

    leostream · agentOct 29, 2018

  • CVE-2021-41550
    28Monitor

    Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code.

    HighCVSS 7.2No exploitEPSS 1%

    leostream · connection brokerJan 18, 2022

  • CVE-2021-38157
    24Monitor

    LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter.

    MediumCVSS 6.1No exploitEPSS 1%

    leostream · connection brokerAug 6, 2021

  • CVE-2021-41551
    19Monitor

    Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a s

    MediumCVSS 4.9No exploitEPSS 1%

    leostream · connection brokerJan 18, 2022