automatedlogic records
7 published records for vendor automatedlogic.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-428 Unquoted Search Path or Element1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2024-8525No exploit | Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Uploadautomated logic, a carrier company · webctrl · CWE-434 | Critical10.0 | — | 1.4% | Nov 21, 2024 |
32Monitor | CVE-2017-9650Proof of concept | An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Webautomatedlogic · i-vu · CWE-434 | High7.8 | — | 2.3% | Aug 25, 2017 |
30Monitor | CVE-2016-5795No exploit | An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and priautomatedlogic · i-vu · CWE-611 | High7.3 | — | 2.2% | Aug 31, 2017 |
28Monitor | CVE-2017-9640Proof of concept | A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScautomatedlogic · i-vu · CWE-22 | Medium6.3 | — | 8.4% | Aug 25, 2017 |
28Monitor | CVE-2017-9644Proof of concept | An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; automatedlogic · i-vu · CWE-428 | High7.0 | — | 1.4% | Aug 25, 2017 |
27Monitor | CVE-2021-31682Proof of concept | The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks automatedlogic · webctrl · CWE-79 | Medium6.1 | — | 10.5% | Oct 22, 2021 |
24Monitor | CVE-2022-1019No exploit | Automated Logic WebCtrl Server Open Redirection Vulnerabilityautomatedlogic · webctrl server · CWE-601 | Medium6.1 | — | 0.6% | Apr 19, 2022 |
- CVE-2024-852540Plan
Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload
CriticalCVSS 10.0No exploitEPSS 1%automated logic, a carrier company · webctrlNov 21, 2024
- CVE-2017-965032Monitor
An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web
HighCVSS 7.8Proof of conceptEPSS 2%automatedlogic · i-vuAug 25, 2017
- CVE-2016-579530Monitor
An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and pri
HighCVSS 7.3No exploitEPSS 2%automatedlogic · i-vuAug 31, 2017
- CVE-2017-964028Monitor
A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteSc
MediumCVSS 6.3Proof of conceptEPSS 8%automatedlogic · i-vuAug 25, 2017
- CVE-2017-964428Monitor
An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior;
HighCVSS 7.0Proof of conceptEPSS 1%automatedlogic · i-vuAug 25, 2017
- CVE-2021-3168227Monitor
The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks
MediumCVSS 6.1Proof of conceptEPSS 10%automatedlogic · webctrlOct 22, 2021
- CVE-2022-101924Monitor
Automated Logic WebCtrl Server Open Redirection Vulnerability
MediumCVSS 6.1No exploitEPSS 0%automatedlogic · webctrl serverApr 19, 2022