Axway kayıtları
axway üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-20 Improper Input Validation1
- CWE-287 Improper Authentication1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-91 XML Injection (aka Blind XPath Injection)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2019-14277İstismar yok | Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration) is vulnerable to unauthenticated blind XML injectiaxway · securetransport · CWE-91 | Kritik9,8 | — | %7,3 | 26 Tem 2019 |
35İzleyin | CVE-2012-4991Kavram kanıtı | Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to (1) read, (2) axway · securetransport · CWE-22 | Yüksek8,5 | — | %4,5 | 13 Ara 2012 |
31İzleyin | CVE-2019-6500İstismar yok | In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTaxway · file tranfer direct · CWE-22 | Yüksek7,5 | — | %4,0 | 21 Oca 2019 |
31İzleyin | CVE-2015-5606İstismar yok | Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted requeaxway · vordel xml gateway · CWE-20 | Yüksek7,5 | — | %1,7 | 3 Nis 2019 |
27İzleyin | CVE-2013-7057Kavram kanıtı | Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authenticaxway · securetransport · CWE-352 | Orta6,8 | — | %1,4 | 4 Kas 2014 |
20İzleyin | CVE-2012-6452İstismar yok | Axway Secure Messenger before 6.5 Updated Release 7, as used in Axway Email Firewall, provides different responses to authentication requestaxway · email firewall · CWE-287 | Orta5,0 | — | %1,4 | 27 May 2014 |
- CVE-2019-1427741Planlayın
Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration) is vulnerable to unauthenticated blind XML injecti
KritikCVSS 9,8İstismar yokEPSS %7axway · securetransport26 Tem 2019
- CVE-2012-499135İzleyin
Multiple directory traversal vulnerabilities in Axway SecureTransport 5.1 SP2 and earlier allow remote authenticated users to (1) read, (2)
YüksekCVSS 8,5Kavram kanıtıEPSS %4axway · securetransport13 Ara 2012
- CVE-2019-650031İzleyin
In Axway File Transfer Direct 2.7.1, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HT
YüksekCVSS 7,5İstismar yokEPSS %4axway · file tranfer direct21 Oca 2019
- CVE-2015-560631İzleyin
Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a specially crafted reque
YüksekCVSS 7,5İstismar yokEPSS %1axway · vordel xml gateway3 Nis 2019
- CVE-2013-705727İzleyin
Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authentic
OrtaCVSS 6,8Kavram kanıtıEPSS %1axway · securetransport4 Kas 2014
- CVE-2012-645220İzleyin
Axway Secure Messenger before 6.5 Updated Release 7, as used in Axway Email Firewall, provides different responses to authentication request
OrtaCVSS 5,0İstismar yokEPSS %1axway · email firewall27 May 2014