Vulnerabilidades en VISAM
15 resultadosAnálisis Vexday
A VISAM apresenta 15 vulnerabilidades catalogadas, nenhuma delas atualmente sob exploração ativa ou com severidade crítica, indicando risco contido. A fraqueza predominante é CWE-611 (XML External Entity Injection), típica de processamento inseguro de entrada, mas sem atividade recente de divulgação que sugira pressão imediata. O perfil geral sugere exposição moderada que merece remediação planejada, porém sem urgência crítica.
CVE-2022-46300MEDIUMCVE-2022-46300EPSS 4.1%CVE-2022-45876MEDIUMCVE-2022-45876EPSS 3.3%CVE-2020-10599—VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow a vulnerable ActiveX component to be exploited resulting in a buffEPSS 2.5%CVE-2020-7008—VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, EPSS 1.9%CVE-2022-45468MEDIUMCVE-2022-45468EPSS 1.8%CVE-2022-46286MEDIUMCVE-2022-46286EPSS 1.8%CVE-2020-7000—VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow an unauthenticated attacker to discover the cryptographic key fromEPSS 1.1%CVE-2021-38417HIGHVISAM VBASE Editor Improper Access ControlEPSS 0.7%CVE-2021-42537MEDIUMVISAM VBASE Editor Improper Restriction of XMLEPSS 0.5%CVE-2021-42535MEDIUMVISAM VBASE Editor Cross Site ScriptingEPSS 0.4%CVE-2020-7004—VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow weak or insecure permissions on the VBASE directory resulting in eEPSS 0.4%CVE-2022-41696MEDIUMCVE-2022-41696EPSS 0.3%CVE-2022-43512MEDIUMCVE-2022-43512EPSS 0.3%CVE-2022-45121MEDIUMCVE-2022-45121EPSS 0.3%CVE-2020-10601—VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module allow weak hashing algorithm and insecure permissions which may allow a locaEPSS 0.3%