YSoft records

6 published records for vendor ysoft.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2018-15498No exploit	YSoft SafeQ Server 6 allows a replay attack.ysoft · safeq server client · CWE-294 Pre-auth Auth bypass	High8.1	—	1.2%	Mar 21, 2019
31Monitor	CVE-2022-23862Proof of concept	A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53.ysoft · safeq · CWE-306 RCE Auth bypass Local privilege escalation	High7.8	—	0.5%	Oct 22, 2024
31Monitor	CVE-2022-38176No exploit	An issue was discovered in YSoft SAFEQ 6 before 6.0.72.ysoft · safeq Local privilege escalation	High7.8	—	0.4%	Sep 6, 2022
31Monitor	CVE-2021-31859No exploit	Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by overwriting the execysoft · safeq · CWE-732 Local privilege escalation	High7.8	—	0.3%	Jul 14, 2021
26Monitor	CVE-2023-35833No exploit	An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82.ysoft · safeq server · CWE-319 Weak crypto	Medium6.5	—	0.3%	Jul 13, 2023
21Monitor	CVE-2022-23861Proof of concept	Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53.ysoft · safeq · CWE-79 XSS	Medium5.4	—	0.5%	Oct 22, 2024

CVE-2018-15498
32Monitor
YSoft SafeQ Server 6 allows a replay attack.
HighCVSS 8.1No exploitEPSS 1%
- Pre-auth
- Auth bypass
ysoft · safeq server clientMar 21, 2019
CVE-2022-23862
31Monitor
A Local Privilege Escalation issue was discovered in Y Soft SAFEQ 6 Build 53.
HighCVSS 7.8Proof of conceptEPSS 0%
ysoft · safeqOct 22, 2024
CVE-2022-38176
31Monitor
An issue was discovered in YSoft SAFEQ 6 before 6.0.72.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
ysoft · safeqSep 6, 2022
CVE-2021-31859
31Monitor
Incorrect privileges in the MU55 FlexiSpooler service in YSoft SafeQ 6 6.0.55 allows local user privilege escalation by overwriting the exec
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
ysoft · safeqJul 14, 2021
CVE-2023-35833
26Monitor
An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82.
MediumCVSS 6.5No exploitEPSS 0%
- Weak crypto
ysoft · safeq serverJul 13, 2023
CVE-2022-23861
21Monitor
Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53.
MediumCVSS 5.4Proof of conceptEPSS 0%
- XSS
ysoft · safeqOct 22, 2024