maxum records

29 published records for vendor maxum.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

29 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2025-55055No exploit	CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')maxum · rumpus · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.8%	Nov 17, 2025
39Monitor	CVE-2025-55058No exploit	CWE-20 Improper Input Validationmaxum · rumpus · CWE-20 Pre-auth	Critical9.8	—	0.3%	Nov 17, 2025
38Monitor	CVE-2008-7078Proof of concept	Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTmaxum · rumpus · CWE-119 RCE Memory safety	Critical9.0	—	7.1%	Aug 25, 2009
36Monitor	CVE-2020-27575No exploit	Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability.maxum · rumpus · CWE-78 RCE Command injection	High8.8	—	3.1%	Mar 8, 2021
35Monitor	CVE-2020-27574No exploit	Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF).maxum · rumpus · CWE-352 Pre-auth CSRF	High8.8	—	0.8%	Mar 8, 2021
35Monitor	CVE-2019-19659No exploit	A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1.maxum · rumpus · CWE-352 Pre-auth CSRF	High8.8	—	0.5%	Feb 10, 2020
35Monitor	CVE-2022-46368No exploit	Rumpus - FTP server Cross-site request forgery (CSRF) – Create usermaxum · rumpus · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jan 12, 2023
35Monitor	CVE-2022-46367No exploit	Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalationmaxum · rumpus · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Jan 12, 2023
35Monitor	CVE-2025-55057No exploit	Multiple CWE-352 Cross-Site Request Forgery (CSRF)maxum · rumpus · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Nov 17, 2025
32Monitor	CVE-2019-19368Proof of concept	A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1.maxum · rumpus · CWE-79 pre-auth RCE XSS	Medium6.1	—	25.9%	Dec 16, 2019
30Monitor	CVE-2022-46370No exploit	Rumpus - FTP server Improper Token Verificationmaxum · rumpus · CWE-345 Pre-auth	High7.5	—	0.2%	Jan 12, 2023
28Monitor	CVE-2019-19664No exploit	A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1.maxum · rumpus ftp · CWE-352 Pre-auth CSRF	High7.1	—	0.4%	Feb 10, 2020
26Monitor	CVE-2020-12737No exploit	An issue was discovered in Maxum Rumpus before 8.2.12 on macOS.maxum · rumpus · CWE-22 Path traversal	Medium6.5	—	1.1%	May 8, 2020
26Monitor	CVE-2019-19663No exploit	A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1.maxum · rumpus · CWE-352 Pre-auth CSRF	Medium6.5	—	0.4%	Feb 10, 2020
26Monitor	CVE-2019-19669No exploit	A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1.maxum · rumpus ftp · CWE-352 Pre-auth CSRF	Medium6.5	—	0.4%	Feb 10, 2020
26Monitor	CVE-2019-19660No exploit	A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1.maxum · rumpus · CWE-352 Pre-auth CSRF	Medium6.5	—	0.4%	Feb 10, 2020
26Monitor	CVE-2019-19665No exploit	A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1.maxum · rumpus · CWE-352 Pre-auth CSRF	Medium6.5	—	0.4%	Feb 10, 2020
26Monitor	CVE-2019-19662No exploit	A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1.maxum · rumpus ftp · CWE-352 Pre-auth CSRF	Medium6.5	—	0.4%	Feb 10, 2020
24Monitor	CVE-2020-8514No exploit	An issue was discovered in Rumpus 8.2.10 on macOS.maxum · rumpus · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Feb 2, 2020
24Monitor	CVE-2019-19661No exploit	A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp.maxum · rumpus ftp · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Feb 10, 2020
24Monitor	CVE-2019-19670No exploit	A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1.maxum · rumpus ftp Pre-auth XSS	Medium6.1	—	0.7%	Feb 10, 2020
24Monitor	CVE-2022-39187No exploit	Rumpus - FTP server Reflected cross-site scripting (RXSS)maxum · rumpus · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Jan 12, 2023
24Monitor	CVE-2025-55059No exploit	CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')maxum · rumpus · CWE-79 Pre-auth XSS	Medium6.1	—	0.2%	Nov 17, 2025
24Monitor	CVE-2025-55056No exploit	Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')maxum · rumpus · CWE-79 Pre-auth XSS	Medium6.1	—	0.2%	Nov 17, 2025
21Monitor	CVE-2020-27576No exploit	Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS).maxum · rumpus · CWE-79 XSS	Medium5.4	—	0.6%	Mar 8, 2021

CVE-2025-55055
39Monitor
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
maxum · rumpusNov 17, 2025
CVE-2025-55058
39Monitor
CWE-20 Improper Input Validation
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
maxum · rumpusNov 17, 2025
CVE-2008-7078
38Monitor
Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTT
CriticalCVSS 9.0Proof of conceptEPSS 7%
- RCE
- Memory safety
maxum · rumpusAug 25, 2009
CVE-2020-27575
36Monitor
Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability.
HighCVSS 8.8No exploitEPSS 3%
- RCE
- Command injection
maxum · rumpusMar 8, 2021
CVE-2020-27574
35Monitor
Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery (CSRF).
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
maxum · rumpusMar 8, 2021
CVE-2019-19659
35Monitor
A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
maxum · rumpusFeb 10, 2020
CVE-2022-46368
35Monitor
Rumpus - FTP server Cross-site request forgery (CSRF) – Create user
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
maxum · rumpusJan 12, 2023
CVE-2022-46367
35Monitor
Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
maxum · rumpusJan 12, 2023
CVE-2025-55057
35Monitor
Multiple CWE-352 Cross-Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
maxum · rumpusNov 17, 2025
CVE-2019-19368
32Monitor
A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1.
MediumCVSS 6.1Proof of conceptEPSS 26%
- pre-auth RCE
- XSS
maxum · rumpusDec 16, 2019
CVE-2022-46370
30Monitor
Rumpus - FTP server Improper Token Verification
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
maxum · rumpusJan 12, 2023
CVE-2019-19664
28Monitor
A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1.
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- CSRF
maxum · rumpus ftpFeb 10, 2020
CVE-2020-12737
26Monitor
An issue was discovered in Maxum Rumpus before 8.2.12 on macOS.
MediumCVSS 6.5No exploitEPSS 1%
- Path traversal
maxum · rumpusMay 8, 2020
CVE-2019-19663
26Monitor
A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
maxum · rumpusFeb 10, 2020
CVE-2019-19669
26Monitor
A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
maxum · rumpus ftpFeb 10, 2020
CVE-2019-19660
26Monitor
A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
maxum · rumpusFeb 10, 2020
CVE-2019-19665
26Monitor
A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
maxum · rumpusFeb 10, 2020
CVE-2019-19662
26Monitor
A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- CSRF
maxum · rumpus ftpFeb 10, 2020
CVE-2020-8514
24Monitor
An issue was discovered in Rumpus 8.2.10 on macOS.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
maxum · rumpusFeb 2, 2020
CVE-2019-19661
24Monitor
A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
maxum · rumpus ftpFeb 10, 2020
CVE-2019-19670
24Monitor
A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1.
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
maxum · rumpus ftpFeb 10, 2020
CVE-2022-39187
24Monitor
Rumpus - FTP server Reflected cross-site scripting (RXSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
maxum · rumpusJan 12, 2023
CVE-2025-55059
24Monitor
CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
maxum · rumpusNov 17, 2025
CVE-2025-55056
24Monitor
Multiple CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
maxum · rumpusNov 17, 2025
CVE-2020-27576
21Monitor
Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting (XSS).
MediumCVSS 5.4No exploitEPSS 1%
- XSS
maxum · rumpusMar 8, 2021