xceedium records
6 published records for vendor xceedium.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-798 Use of Hard-coded Credentials1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
45Plan | CVE-2015-4664Proof of concept | An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary broadcom · privileged access manager · CWE-20 | Critical9.8 | — | 20.5% | Jun 18, 2018 |
42Plan | CVE-2015-4667Proof of concept | Multiple hardcoded credentials in Xsuite 2.x.xceedium · xsuite · CWE-798 | Critical9.8 | — | 11.1% | Sep 25, 2017 |
31Monitor | CVE-2015-4669Proof of concept | The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system.xceedium · xsuite · CWE-89 | High7.8 | — | 1.0% | Sep 25, 2017 |
26Monitor | CVE-2015-4668Proof of concept | Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishxceedium · xsuite · CWE-601 | Medium6.1 | — | 6.7% | Sep 25, 2017 |
25Monitor | CVE-2015-4666Proof of concept | Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrarxceedium · xsuite · CWE-22 | Medium5.0 | — | 16.2% | Aug 13, 2015 |
18Monitor | CVE-2015-4665Proof of concept | Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary xceedium · xsuite · CWE-79 | Medium4.3 | — | 3.3% | Aug 13, 2015 |
- CVE-2015-466445Plan
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary
CriticalCVSS 9.8Proof of conceptEPSS 20%broadcom · privileged access managerJun 18, 2018
- CVE-2015-466742Plan
Multiple hardcoded credentials in Xsuite 2.x.
CriticalCVSS 9.8Proof of conceptEPSS 11%xceedium · xsuiteSep 25, 2017
- CVE-2015-466931Monitor
The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system.
HighCVSS 7.8Proof of conceptEPSS 1%xceedium · xsuiteSep 25, 2017
- CVE-2015-466826Monitor
Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phish
MediumCVSS 6.1Proof of conceptEPSS 6%xceedium · xsuiteSep 25, 2017
- CVE-2015-466625Monitor
Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrar
MediumCVSS 5.0Proof of conceptEPSS 16%xceedium · xsuiteAug 13, 2015
- CVE-2015-466518Monitor
Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary
MediumCVSS 4.3Proof of conceptEPSS 3%xceedium · xsuiteAug 13, 2015