Skip to content
Noroxi

WithSecure records

21 published records for vendor withsecure.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2023-43762
    39Monitor

    Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend).

    CriticalCVSS 9.8No exploitEPSS 1%

    withsecure · f-secure policy managerSep 22, 2023

  • CVE-2022-38165
    39Monitor

    Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in arbit

    CriticalCVSS 9.8No exploitEPSS 1%

    withsecure · f-secure policy managerNov 17, 2022

  • CVE-2024-4454
    31Monitor

    WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    withsecure · client securityMay 22, 2024

  • CVE-2023-47172
    31Monitor

    Certain WithSecure products allow Local Privilege Escalation.

    HighCVSS 7.8No exploitEPSS 0%

    withsecure · client securityNov 20, 2023

  • CVE-2024-27359
    30Monitor

    Certain WithSecure products allow a Denial of Service because the engine scanner can go into an infinite loop when processing an archive fil

    HighCVSS 7.5No exploitEPSS 1%

    Feb 26, 2024

  • CVE-2023-47263
    30Monitor

    Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file.

    HighCVSS 7.5No exploitEPSS 1%

    withsecure · client securityNov 15, 2023

  • CVE-2023-47264
    30Monitor

    Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS).

    HighCVSS 7.5No exploitEPSS 1%

    withsecure · client securityNov 15, 2023

  • CVE-2023-42523
    30Monitor

    Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file.

    HighCVSS 7.5No exploitEPSS 1%

    withsecure · client securitySep 18, 2023

  • CVE-2023-42524
    30Monitor

    Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types.

    HighCVSS 7.5No exploitEPSS 1%

    withsecure · client securitySep 18, 2023

  • CVE-2023-42525
    30Monitor

    Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types.

    HighCVSS 7.5No exploitEPSS 1%

    withsecure · client securitySep 18, 2023

  • CVE-2023-42526
    30Monitor

    Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files.

    HighCVSS 7.5No exploitEPSS 1%

    withsecure · client securitySep 18, 2023

  • CVE-2023-42521
    30Monitor

    Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file.

    HighCVSS 7.5No exploitEPSS 1%

    withsecure · client securitySep 18, 2023

  • CVE-2023-42520
    30Monitor

    Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files.

    HighCVSS 7.5No exploitEPSS 1%

    withsecure · client securitySep 18, 2023

  • CVE-2023-42522
    30Monitor

    Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file.

    HighCVSS 7.5No exploitEPSS 1%

    withsecure · client securitySep 18, 2023

  • CVE-2022-28874
    30Monitor

    Multiple Denial-of-Service (DoS) Vulnerabilities

    HighCVSS 7.5No exploitEPSS 1%

    f-secure · atlantMay 23, 2022

  • CVE-2024-45520
    30Monitor

    WithSecure Atlant (formerly F-Secure Atlant) 1.0.35-1 allows a remote Denial of Service because of memory corruption during scanning of a PE

    HighCVSS 7.5No exploitEPSS 1%

    Dec 1, 2024

  • CVE-2022-28884
    30Monitor

    Denial-of-Service (DoS) Vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    withsecure · business suiteSep 6, 2022

  • CVE-2024-23764
    26Monitor

    Certain WithSecure products allow Local Privilege Escalation.

    MediumCVSS 6.7No exploitEPSS 0%

    withsecure · client securityFeb 8, 2024

  • CVE-2022-38162
    24Monitor

    Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10) exists within the F-Secure Policy Manager due to an u

    MediumCVSS 6.1No exploitEPSS 1%

    withsecure · f-secure policy managerOct 25, 2022

  • CVE-2023-43763
    24Monitor

    Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint.

    MediumCVSS 6.1No exploitEPSS 0%

    withsecure · f-secure policy managerSep 22, 2023

  • CVE-2024-27357
    23Monitor

    An issue was discovered in WithSecure Elements Agent through 23.x for macOS, WithSecure Elements Client Security through 23.x for macOS, and

    MediumCVSS 5.8No exploitEPSS 0%

    Jul 26, 2024