silver-peak kayıtları
silver-peak üreticisine ait 16 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-295 Improper Certificate Validation2
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-1188 Initialization of a Resource with an Insecure Default1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
16 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
43Planlayın | CVE-2020-12146İstismar yok | Silver Peak Unity OrchestratorTM subject to path traversal.silver-peak · unity orchestrator · CWE-22 | Yüksek8,8 | — | %27,5 | 5 Kas 2020 |
41Planlayın | CVE-2020-12145İstismar yok | Silver Peak Unity OrchestratorTM authentication can be subverted through manipulation of HTTP headers.silver-peak · unity orchestrator · CWE-287 | Kritik9,8 | — | %6,0 | 5 Kas 2020 |
39İzleyin | CVE-2019-16102İstismar yok | Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity.silver-peak · unity edgeconnect sd-wan firmware · CWE-1188 | Kritik9,8 | — | %1,5 | 8 Eyl 2019 |
35İzleyin | CVE-2020-12147İstismar yok | Unauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database.silver-peak · unity orchestrator · CWE-22 | Yüksek8,8 | — | %1,5 | 5 Kas 2020 |
35İzleyin | CVE-2019-16099İstismar yok | Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file.silver-peak · unity edgeconnect sd-wan firmware · CWE-352 | Yüksek8,8 | — | %0,6 | 8 Eyl 2019 |
31İzleyin | CVE-2019-16100İstismar yok | Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic frsilver-peak · unity edgeconnect sd-wan firmware | Yüksek7,5 | — | %1,8 | 8 Eyl 2019 |
29İzleyin | CVE-2019-16103İstismar yok | Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators) from the menu to a root Bash OS shell via the silver-peak · unity edgeconnect sd-wan firmware | Yüksek7,2 | — | %1,8 | 8 Eyl 2019 |
27İzleyin | CVE-2020-12149İstismar yok | OS Command Injection - Management File Uploadarubanetworks · edgeconnect enterprise · CWE-78 | Orta6,8 | — | %1,3 | 11 Ara 2020 |
27İzleyin | CVE-2014-2974İstismar yok | Cross-site request forgery (CSRF) vulnerability in php/user_account.php in Silver Peak VX through 6.2.4 allows remote attackers to hijack thsilver-peak · vx · CWE-352 | Orta6,8 | — | %0,6 | 28 Tem 2014 |
24İzleyin | CVE-2019-16104İstismar yok | Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO.silver-peak · unity edgeconnect sd-wan firmware · CWE-79 | Orta6,1 | — | %0,8 | 8 Eyl 2019 |
21İzleyin | CVE-2019-16101İstismar yok | Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSONsilver-peak · unity edgeconnect sd-wan firmware · CWE-209 | Orta5,3 | — | %1,4 | 8 Eyl 2019 |
20İzleyin | CVE-2019-16105İstismar yok | Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI.silver-peak · unity edgeconnect sd-wan firmware · CWE-22 | Orta4,9 | — | %1,7 | 8 Eyl 2019 |
19İzleyin | CVE-2020-12142İstismar yok | IPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentialssilver-peak · unity edgeconnect for amazon web services · CWE-668 | Orta4,9 | — | %0,7 | 5 May 2020 |
19İzleyin | CVE-2020-12144İstismar yok | The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validatedsilver-peak · unity edgeconnect for amazon web services · CWE-295 | Orta4,9 | — | %0,3 | 5 May 2020 |
19İzleyin | CVE-2020-12143İstismar yok | The certificate used to identify Orchestrator to EdgeConnect devices is not validatedsilver-peak · unity edgeconnect for amazon web services · CWE-295 | Orta4,9 | — | %0,3 | 5 May 2020 |
18İzleyin | CVE-2014-2975İstismar yok | Cross-site scripting (XSS) vulnerability in php/user_account.php in Silver Peak VX before 6.2.4 allows remote attackers to inject arbitrary silver-peak · vx · CWE-79 | Orta4,3 | — | %1,6 | 28 Tem 2014 |
- CVE-2020-1214643Planlayın
Silver Peak Unity OrchestratorTM subject to path traversal.
YüksekCVSS 8,8İstismar yokEPSS %27silver-peak · unity orchestrator5 Kas 2020
- CVE-2020-1214541Planlayın
Silver Peak Unity OrchestratorTM authentication can be subverted through manipulation of HTTP headers.
KritikCVSS 9,8İstismar yokEPSS %6silver-peak · unity orchestrator5 Kas 2020
- CVE-2019-1610239İzleyin
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has an SNMP service with a public value for rocommunity and trapcommunity.
KritikCVSS 9,8İstismar yokEPSS %1silver-peak · unity edgeconnect sd-wan firmware8 Eyl 2019
- CVE-2020-1214735İzleyin
Unauthorized queries against the Silver Peak Unity OrchestratorTM MySQL database.
YüksekCVSS 8,8İstismar yokEPSS %1silver-peak · unity orchestrator5 Kas 2020
- CVE-2019-1609935İzleyin
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows CSRF via JSON data to a .swf file.
YüksekCVSS 8,8İstismar yokEPSS %0silver-peak · unity edgeconnect sd-wan firmware8 Eyl 2019
- CVE-2019-1610031İzleyin
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to trigger a web-interface outage via slow client-side HTTP traffic fr
YüksekCVSS 7,5İstismar yokEPSS %1silver-peak · unity edgeconnect sd-wan firmware8 Eyl 2019
- CVE-2019-1610329İzleyin
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows privilege escalation (by administrators) from the menu to a root Bash OS shell via the
YüksekCVSS 7,2İstismar yokEPSS %1silver-peak · unity edgeconnect sd-wan firmware8 Eyl 2019
- CVE-2020-1214927İzleyin
OS Command Injection - Management File Upload
OrtaCVSS 6,8İstismar yokEPSS %1arubanetworks · edgeconnect enterprise11 Ara 2020
- CVE-2014-297427İzleyin
Cross-site request forgery (CSRF) vulnerability in php/user_account.php in Silver Peak VX through 6.2.4 allows remote attackers to hijack th
OrtaCVSS 6,8İstismar yokEPSS %0silver-peak · vx28 Tem 2014
- CVE-2019-1610424İzleyin
Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected XSS via the rest/json/configdb/download/ PATH_INFO.
OrtaCVSS 6,1İstismar yokEPSS %0silver-peak · unity edgeconnect sd-wan firmware8 Eyl 2019
- CVE-2019-1610121İzleyin
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows remote attackers to obtain potentially sensitive stack traces by sending incorrect JSON
OrtaCVSS 5,3İstismar yokEPSS %1silver-peak · unity edgeconnect sd-wan firmware8 Eyl 2019
- CVE-2019-1610520İzleyin
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI.
OrtaCVSS 4,9İstismar yokEPSS %1silver-peak · unity edgeconnect sd-wan firmware8 Eyl 2019
- CVE-2020-1214219İzleyin
IPSec UDP key material can be retrieved from EdgeConnect by a user with admin credentials
OrtaCVSS 4,9İstismar yokEPSS %0silver-peak · unity edgeconnect for amazon web services5 May 2020
- CVE-2020-1214419İzleyin
The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated
OrtaCVSS 4,9İstismar yokEPSS %0silver-peak · unity edgeconnect for amazon web services5 May 2020
- CVE-2020-1214319İzleyin
The certificate used to identify Orchestrator to EdgeConnect devices is not validated
OrtaCVSS 4,9İstismar yokEPSS %0silver-peak · unity edgeconnect for amazon web services5 May 2020
- CVE-2014-297518İzleyin
Cross-site scripting (XSS) vulnerability in php/user_account.php in Silver Peak VX before 6.2.4 allows remote attackers to inject arbitrary
OrtaCVSS 4,3İstismar yokEPSS %1silver-peak · vx28 Tem 2014