vantage6 kayıtları
vantage6 üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %94,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-284 Improper Access Control2
- CWE-863 Incorrect Authorization2
- CWE-208 Observable Timing Discrepancy2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-330 Use of Insufficiently Random Values1
- CWE-345 Insufficient Verification of Data Authenticity1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-21653İstismar yok | vantage6 insecure SSH configuration for node and server containersvantage6 · vantage6 · CWE-284 | Kritik9,8 | — | %0,5 | 30 Oca 2024 |
35İzleyin | CVE-2024-21649İstismar yok | Remote code executionvantage6 · vantage6 · CWE-94 | Yüksek8,8 | — | %1,3 | 30 Oca 2024 |
35İzleyin | CVE-2023-23929İstismar yok | Refresh tokens do not expire in Vantage6vantage6 · vantage6 · CWE-613 | Yüksek8,8 | — | %0,6 | 3 Mar 2023 |
35İzleyin | CVE-2023-47631İstismar yok | vantage6 Node accepts non-whitelisted algorithms from malicious servervantage6 · vantage6 · CWE-345 | Yüksek8,8 | — | %0,4 | 14 Kas 2023 |
28İzleyin | CVE-2023-23930İstismar yok | vantage6's Pickle serialization is insecurevantage6 · vantage6 · CWE-502 | Yüksek7,2 | — | %0,9 | 11 Eki 2023 |
26İzleyin | CVE-2022-39228İstismar yok | Observable Response Discrepancy in vantage6vantage6 · vantage6 · CWE-203 | Orta6,5 | — | %0,6 | 1 Mar 2023 |
26İzleyin | CVE-2023-22738İstismar yok | Improper Preservation of Permissions in vantage6vantage6 · vantage6 · CWE-281 | Orta6,5 | — | %0,4 | 1 Mar 2023 |
26İzleyin | CVE-2024-23823İstismar yok | CORS settings overly permissive in vantage6vantage6 · vantage6 · CWE-863 | Orta6,5 | — | %0,3 | 14 Mar 2024 |
21İzleyin | CVE-2023-28635İstismar yok | Defining resource name as integer in vantage6 may give unintended accessvantage6 · vantage6 · CWE-863 | Orta5,4 | — | %0,4 | 11 Eki 2023 |
21İzleyin | CVE-2024-24770İstismar yok | Username timing attack on recover password/MFA token in vantage6vantage6 · vantage6 · CWE-208 | Orta5,3 | — | %0,4 | 14 Mar 2024 |
21İzleyin | CVE-2024-24562İstismar yok | Security headers not set in vantage6-UIvantage6 · vantage6-ui · CWE-668 | Orta5,3 | — | %0,3 | 14 Mar 2024 |
21İzleyin | CVE-2024-22200İstismar yok | vantage6-UI docker image leaks software version informationvantage6 · vantage6-ui · CWE-200 | Orta5,3 | — | %0,3 | 30 Oca 2024 |
17İzleyin | CVE-2023-41882İstismar yok | vantage6 Improper Access Control vulnerabilityvantage6 · vantage6 · CWE-284 | Orta4,3 | — | %0,4 | 11 Eki 2023 |
17İzleyin | CVE-2023-41881İstismar yok | Deleting a collaboration should also delete linked resourcesvantage6 · vantage6 · CWE-200 | Orta4,3 | — | %0,3 | 11 Eki 2023 |
17İzleyin | CVE-2024-22193İstismar yok | vantage6 unencrypted task can be created in encrypted collaborationvantage6 · vantage6 · CWE-922 | Orta4,3 | — | %0,3 | 30 Oca 2024 |
14İzleyin | CVE-2024-21671İstismar yok | vantage6 username timing attackvantage6 · vantage6 · CWE-208 | Düşük3,7 | — | %0,4 | 30 Oca 2024 |
6İzleyin | CVE-2025-43863İstismar yok | vantage6 lacks brute-force protection on change password functionalityvantage6 · vantage6 · CWE-307 | Düşük1,7 | — | %0,5 | 12 Haz 2025 |
6İzleyin | CVE-2025-43866İstismar yok | Vantage6 Server JWT secret not cryptographically securevantage6 · vantage6 · CWE-330 | Düşük1,7 | — | %0,4 | 12 Haz 2025 |
- CVE-2024-2165339İzleyin
vantage6 insecure SSH configuration for node and server containers
KritikCVSS 9,8İstismar yokEPSS %0vantage6 · vantage630 Oca 2024
- CVE-2024-2164935İzleyin
Remote code execution
YüksekCVSS 8,8İstismar yokEPSS %1vantage6 · vantage630 Oca 2024
- CVE-2023-2392935İzleyin
Refresh tokens do not expire in Vantage6
YüksekCVSS 8,8İstismar yokEPSS %1vantage6 · vantage63 Mar 2023
- CVE-2023-4763135İzleyin
vantage6 Node accepts non-whitelisted algorithms from malicious server
YüksekCVSS 8,8İstismar yokEPSS %0vantage6 · vantage614 Kas 2023
- CVE-2023-2393028İzleyin
vantage6's Pickle serialization is insecure
YüksekCVSS 7,2İstismar yokEPSS %1vantage6 · vantage611 Eki 2023
- CVE-2022-3922826İzleyin
Observable Response Discrepancy in vantage6
OrtaCVSS 6,5İstismar yokEPSS %1vantage6 · vantage61 Mar 2023
- CVE-2023-2273826İzleyin
Improper Preservation of Permissions in vantage6
OrtaCVSS 6,5İstismar yokEPSS %0vantage6 · vantage61 Mar 2023
- CVE-2024-2382326İzleyin
CORS settings overly permissive in vantage6
OrtaCVSS 6,5İstismar yokEPSS %0vantage6 · vantage614 Mar 2024
- CVE-2023-2863521İzleyin
Defining resource name as integer in vantage6 may give unintended access
OrtaCVSS 5,4İstismar yokEPSS %0vantage6 · vantage611 Eki 2023
- CVE-2024-2477021İzleyin
Username timing attack on recover password/MFA token in vantage6
OrtaCVSS 5,3İstismar yokEPSS %0vantage6 · vantage614 Mar 2024
- CVE-2024-2456221İzleyin
Security headers not set in vantage6-UI
OrtaCVSS 5,3İstismar yokEPSS %0vantage6 · vantage6-ui14 Mar 2024
- CVE-2024-2220021İzleyin
vantage6-UI docker image leaks software version information
OrtaCVSS 5,3İstismar yokEPSS %0vantage6 · vantage6-ui30 Oca 2024
- CVE-2023-4188217İzleyin
vantage6 Improper Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0vantage6 · vantage611 Eki 2023
- CVE-2023-4188117İzleyin
Deleting a collaboration should also delete linked resources
OrtaCVSS 4,3İstismar yokEPSS %0vantage6 · vantage611 Eki 2023
- CVE-2024-2219317İzleyin
vantage6 unencrypted task can be created in encrypted collaboration
OrtaCVSS 4,3İstismar yokEPSS %0vantage6 · vantage630 Oca 2024
- CVE-2024-2167114İzleyin
vantage6 username timing attack
DüşükCVSS 3,7İstismar yokEPSS %0vantage6 · vantage630 Oca 2024
- CVE-2025-438636İzleyin
vantage6 lacks brute-force protection on change password functionality
DüşükCVSS 1,7İstismar yokEPSS %0vantage6 · vantage612 Haz 2025
- CVE-2025-438666İzleyin
Vantage6 Server JWT secret not cryptographically secure
DüşükCVSS 1,7İstismar yokEPSS %0vantage6 · vantage612 Haz 2025