VISAM records

16 published records for vendor visam.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

16 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2020-10599No exploit	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffvisam · vbase editor · CWE-121 pre-auth RCE Memory safety	Critical9.8	—	2.6%	Apr 3, 2020
35Monitor	CVE-2020-7004No exploit	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in evisam · vbase editor · CWE-276 Local privilege escalation	High8.8	—	0.4%	Apr 3, 2020
31Monitor	CVE-2020-7008No exploit	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, visam · vbase editor · CWE-23 Pre-auth Path traversal	High7.5	—	1.9%	Apr 3, 2020
31Monitor	CVE-2020-10601No exploit	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a locavisam · vbase editor · CWE-326 Weak crypto	High7.8	—	0.3%	Apr 3, 2020
30Monitor	CVE-2022-3217No exploit	When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate login messages.visam · vbase Pre-auth	High7.5	—	1.3%	Sep 16, 2022
30Monitor	CVE-2020-7000No exploit	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key fromvisam · vbase editor · CWE-922 Pre-auth Auth bypass	High7.5	—	1.1%	Apr 3, 2020
30Monitor	CVE-2021-38417No exploit	VISAM VBASE Editor Improper Access Controlvisam · vbase web-remote · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.8%	Jul 27, 2022
30Monitor	CVE-2021-42537No exploit	VISAM VBASE Editor Improper Restriction of XMLvisam · vbase web-remote · CWE-611 Pre-auth XXE	High7.5	—	0.5%	Jul 27, 2022
24Monitor	CVE-2021-42535No exploit	VISAM VBASE Editor Cross Site Scriptingvisam · vbase web-remote · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Jul 27, 2022
23Monitor	CVE-2022-46300No exploit	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Medium5.5	—	4.1%	Mar 21, 2023
23Monitor	CVE-2022-45876No exploit	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase · CWE-611 XXE	Medium5.5	—	3.3%	Apr 26, 2023
23Monitor	CVE-2022-45468No exploit	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Medium5.5	—	1.8%	Mar 21, 2023
23Monitor	CVE-2022-46286No exploit	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Medium5.5	—	1.8%	Mar 21, 2023
22Monitor	CVE-2022-43512No exploit	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Medium5.5	—	0.3%	Mar 21, 2023
22Monitor	CVE-2022-45121No exploit	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Medium5.5	—	0.3%	Mar 21, 2023
22Monitor	CVE-2022-41696No exploit	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Medium5.5	—	0.3%	Mar 21, 2023

CVE-2020-10599
40Plan
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buff
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Memory safety
visam · vbase editorApr 3, 2020
CVE-2020-7004
35Monitor
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in e
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
visam · vbase editorApr 3, 2020
CVE-2020-7008
31Monitor
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use,
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Path traversal
visam · vbase editorApr 3, 2020
CVE-2020-10601
31Monitor
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a loca
HighCVSS 7.8No exploitEPSS 0%
- Weak crypto
visam · vbase editorApr 3, 2020
CVE-2022-3217
30Monitor
When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate login messages.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
visam · vbaseSep 16, 2022
CVE-2020-7000
30Monitor
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Auth bypass
visam · vbase editorApr 3, 2020
CVE-2021-38417
30Monitor
VISAM VBASE Editor Improper Access Control
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
visam · vbase web-remoteJul 27, 2022
CVE-2021-42537
30Monitor
VISAM VBASE Editor Improper Restriction of XML
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- XXE
visam · vbase web-remoteJul 27, 2022
CVE-2021-42535
24Monitor
VISAM VBASE Editor Cross Site Scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
visam · vbase web-remoteJul 27, 2022
CVE-2022-46300
23Monitor
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
MediumCVSS 5.5No exploitEPSS 4%
- XXE
visam · vbase automation baseMar 21, 2023
CVE-2022-45876
23Monitor
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
MediumCVSS 5.5No exploitEPSS 3%
- XXE
visam · vbaseApr 26, 2023
CVE-2022-45468
23Monitor
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
MediumCVSS 5.5No exploitEPSS 2%
- XXE
visam · vbase automation baseMar 21, 2023
CVE-2022-46286
23Monitor
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
MediumCVSS 5.5No exploitEPSS 2%
- XXE
visam · vbase automation baseMar 21, 2023
CVE-2022-43512
22Monitor
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
MediumCVSS 5.5No exploitEPSS 0%
- XXE
visam · vbase automation baseMar 21, 2023
CVE-2022-45121
22Monitor
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
MediumCVSS 5.5No exploitEPSS 0%
- XXE
visam · vbase automation baseMar 21, 2023
CVE-2022-41696
22Monitor
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
MediumCVSS 5.5No exploitEPSS 0%
- XXE
visam · vbase automation baseMar 21, 2023