siren kayıtları

siren üreticisine ait 6 yayımlanmış kayıt.

Araştırmacı profili

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

6 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2021-36794İstismar yok	In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled globallsiren · investigate Kimlik doğrulamasız	Kritik9,8	—	%1,4	2 Kas 2021
39İzleyin	CVE-2022-47544İstismar yok	An issue was discovered in Siren Investigate before 12.1.7.siren · investigate · CWE-693 Kimlik doğrulamasız	Kritik9,8	—	%0,7	5 Oca 2023
39İzleyin	CVE-2023-35857İstismar yok	In Siren Investigate before 13.2.2, session keys remain active even after logging out.siren · investigate · CWE-613 Kimlik doğrulamasız	Kritik9,8	—	%0,6	19 Haz 2023
32İzleyin	CVE-2021-31216İstismar yok	Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (which is enabled by siren · investigate · CWE-918 SSRF	Yüksek8,1	—	%0,7	19 Tem 2021
21İzleyin	CVE-2022-47543İstismar yok	An issue was discovered in Siren Investigate before 12.1.7.siren · investigate · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,3	—	%0,4	5 Oca 2023
17İzleyin	CVE-2021-28938İstismar yok	Siren Federate before 6.8.14-10.3.9, 6.9.x through 7.6.x before 7.6.2-20.2, 7.7.x through 7.9.x before 7.9.3-21.6, 7.10.x before 7.10.2-22.2siren · federate	Orta4,3	—	%0,8	13 Nis 2021

CVE-2021-36794
39İzleyin
In Siren Investigate before 11.1.4, when enabling the cluster feature of the Siren Alert application, TLS verifications are disabled globall
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
siren · investigate2 Kas 2021
CVE-2022-47544
39İzleyin
An issue was discovered in Siren Investigate before 12.1.7.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
siren · investigate5 Oca 2023
CVE-2023-35857
39İzleyin
In Siren Investigate before 13.2.2, session keys remain active even after logging out.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
siren · investigate19 Haz 2023
CVE-2021-31216
32İzleyin
Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (which is enabled by
YüksekCVSS 8,1İstismar yokEPSS %1
- SSRF
siren · investigate19 Tem 2021
CVE-2022-47543
21İzleyin
An issue was discovered in Siren Investigate before 12.1.7.
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
siren · investigate5 Oca 2023
CVE-2021-28938
17İzleyin
Siren Federate before 6.8.14-10.3.9, 6.9.x through 7.6.x before 7.6.2-20.2, 7.7.x through 7.9.x before 7.9.3-21.6, 7.10.x before 7.10.2-22.2
OrtaCVSS 4,3İstismar yokEPSS %1
siren · federate13 Nis 2021