orpak records
6 published records for vendor orpak.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-310 Cryptographic Issues1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-798 Use of Hard-coded Credentials1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2017-14728No exploit | An authentication bypass was found in an unknown area of the SiteOmat source code.orpak · siteomat · CWE-798 | Critical9.8 | — | 6.2% | Jun 3, 2019 |
40Plan | CVE-2017-14851No exploit | A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25.orpak · siteomat · CWE-89 | Critical9.8 | — | 4.0% | Jun 3, 2019 |
38Monitor | CVE-2017-14854No exploit | A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution.orpak · siteomat · CWE-119 | Critical9.1 | — | 7.2% | Jun 3, 2019 |
35Monitor | CVE-2017-14853No exploit | The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a dorpak · siteomat · CWE-94 | High8.6 | — | 3.8% | Jun 3, 2019 |
34Monitor | CVE-2017-14852No exploit | An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL corpak · siteomat · CWE-310 | High8.6 | — | 1.0% | Jun 3, 2019 |
25Monitor | CVE-2017-14850No exploit | All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to imorpak · siteomat · CWE-79 | Medium6.1 | — | 1.7% | Jun 3, 2019 |
- CVE-2017-1472841Plan
An authentication bypass was found in an unknown area of the SiteOmat source code.
CriticalCVSS 9.8No exploitEPSS 6%orpak · siteomatJun 3, 2019
- CVE-2017-1485140Plan
A SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25.
CriticalCVSS 9.8No exploitEPSS 4%orpak · siteomatJun 3, 2019
- CVE-2017-1485438Monitor
A stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution.
CriticalCVSS 9.1No exploitEPSS 7%orpak · siteomatJun 3, 2019
- CVE-2017-1485335Monitor
The Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a d
HighCVSS 8.6No exploitEPSS 3%orpak · siteomatJun 3, 2019
- CVE-2017-1485234Monitor
An insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL c
HighCVSS 8.6No exploitEPSS 1%orpak · siteomatJun 3, 2019
- CVE-2017-1485025Monitor
All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to im
MediumCVSS 6.1No exploitEPSS 1%orpak · siteomatJun 3, 2019