VISAM kayıtları

visam üreticisine ait 16 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

16 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2020-10599İstismar yok	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffvisam · vbase editor · CWE-121 pre-auth RCE Bellek hatası	Kritik9,8	—	%2,6	3 Nis 2020
35İzleyin	CVE-2020-7004İstismar yok	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in evisam · vbase editor · CWE-276 Yerel yetki yükseltme	Yüksek8,8	—	%0,4	3 Nis 2020
31İzleyin	CVE-2020-7008İstismar yok	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, visam · vbase editor · CWE-23 Kimlik doğrulamasız Yol geçişi	Yüksek7,5	—	%1,9	3 Nis 2020
31İzleyin	CVE-2020-10601İstismar yok	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a locavisam · vbase editor · CWE-326 Zayıf kripto	Yüksek7,8	—	%0,3	3 Nis 2020
30İzleyin	CVE-2022-3217İstismar yok	When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate login messages.visam · vbase Kimlik doğrulamasız	Yüksek7,5	—	%1,3	16 Eyl 2022
30İzleyin	CVE-2020-7000İstismar yok	VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key fromvisam · vbase editor · CWE-922 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%1,1	3 Nis 2020
30İzleyin	CVE-2021-38417İstismar yok	VISAM VBASE Editor Improper Access Controlvisam · vbase web-remote · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Yüksek7,5	—	%0,8	27 Tem 2022
30İzleyin	CVE-2021-42537İstismar yok	VISAM VBASE Editor Improper Restriction of XMLvisam · vbase web-remote · CWE-611 Kimlik doğrulamasız XXE	Yüksek7,5	—	%0,5	27 Tem 2022
24İzleyin	CVE-2021-42535İstismar yok	VISAM VBASE Editor Cross Site Scriptingvisam · vbase web-remote · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	27 Tem 2022
23İzleyin	CVE-2022-46300İstismar yok	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Orta5,5	—	%4,1	21 Mar 2023
23İzleyin	CVE-2022-45876İstismar yok	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase · CWE-611 XXE	Orta5,5	—	%3,3	26 Nis 2023
23İzleyin	CVE-2022-45468İstismar yok	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Orta5,5	—	%1,8	21 Mar 2023
23İzleyin	CVE-2022-46286İstismar yok	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Orta5,5	—	%1,8	21 Mar 2023
22İzleyin	CVE-2022-43512İstismar yok	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Orta5,5	—	%0,3	21 Mar 2023
22İzleyin	CVE-2022-45121İstismar yok	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Orta5,5	—	%0,3	21 Mar 2023
22İzleyin	CVE-2022-41696İstismar yok	Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.visam · vbase automation base · CWE-611 XXE	Orta5,5	—	%0,3	21 Mar 2023

CVE-2020-10599
40Planlayın
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buff
KritikCVSS 9,8İstismar yokEPSS %3
- pre-auth RCE
- Bellek hatası
visam · vbase editor3 Nis 2020
CVE-2020-7004
35İzleyin
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in e
YüksekCVSS 8,8İstismar yokEPSS %0
- Yerel yetki yükseltme
visam · vbase editor3 Nis 2020
CVE-2020-7008
31İzleyin
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use,
YüksekCVSS 7,5İstismar yokEPSS %2
- Kimlik doğrulamasız
- Yol geçişi
visam · vbase editor3 Nis 2020
CVE-2020-10601
31İzleyin
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a loca
YüksekCVSS 7,8İstismar yokEPSS %0
- Zayıf kripto
visam · vbase editor3 Nis 2020
CVE-2022-3217
30İzleyin
When logging in to a VBASE runtime project via Web-Remote, the product uses XOR with a static initial key to obfuscate login messages.
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
visam · vbase16 Eyl 2022
CVE-2020-7000
30İzleyin
VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key from
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
visam · vbase editor3 Nis 2020
CVE-2021-38417
30İzleyin
VISAM VBASE Editor Improper Access Control
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
visam · vbase web-remote27 Tem 2022
CVE-2021-42537
30İzleyin
VISAM VBASE Editor Improper Restriction of XML
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- XXE
visam · vbase web-remote27 Tem 2022
CVE-2021-42535
24İzleyin
VISAM VBASE Editor Cross Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
visam · vbase web-remote27 Tem 2022
CVE-2022-46300
23İzleyin
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
OrtaCVSS 5,5İstismar yokEPSS %4
- XXE
visam · vbase automation base21 Mar 2023
CVE-2022-45876
23İzleyin
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
OrtaCVSS 5,5İstismar yokEPSS %3
- XXE
visam · vbase26 Nis 2023
CVE-2022-45468
23İzleyin
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
OrtaCVSS 5,5İstismar yokEPSS %2
- XXE
visam · vbase automation base21 Mar 2023
CVE-2022-46286
23İzleyin
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
OrtaCVSS 5,5İstismar yokEPSS %2
- XXE
visam · vbase automation base21 Mar 2023
CVE-2022-43512
22İzleyin
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
OrtaCVSS 5,5İstismar yokEPSS %0
- XXE
visam · vbase automation base21 Mar 2023
CVE-2022-45121
22İzleyin
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
OrtaCVSS 5,5İstismar yokEPSS %0
- XXE
visam · vbase automation base21 Mar 2023
CVE-2022-41696
22İzleyin
Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.
OrtaCVSS 5,5İstismar yokEPSS %0
- XXE
visam · vbase automation base21 Mar 2023