Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6A reflected cross-site scripting (XSS) vulnerability exists in the sub-organization login flow of WSO2 Identity Server 7.0.0 due to improper input validation.Check if you run itEPSS 0.23%May 22, 2025
- High7.1Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*; MCheck if you run itEPSS 0.33%May 22, 2025
- Medium4.6Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: throughCheck if you run itEPSS 0.23%May 22, 2025
- High7.0SSRF Server Side Request Forgery vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: thrCheck if you run itEPSS 0.29%May 22, 2025
- High8.8SSL Verification Bypass vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: through 3.*;Check if you run itEPSS 0.45%May 22, 2025
- Critical9.42nd Order SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if administrator credentials become compromised.This issue affecCheck if you run itEPSS 0.39%May 22, 2025
- Medium5.1Serialized configuration information may be disclosed during device commissioning while using ASPECT's configuration toolsetThis issue affects ASPECT-Enterprise: through 3.*; NEXUSCheck if you run itEPSS 0.20%May 22, 2025
- Medium6.9Sensitive device logger information in ASPECT may be exposed if administrator credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NEXUS Series: throughCheck if you run itEPSS 0.36%May 22, 2025
- High8.7Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-EntCheck if you run itEPSS 0.41%May 22, 2025
- Critical9.8An incorrect authorization vulnerability exists in multiple WSO2 products due to a business logic flaw in the account recovery-related SOAP admin service.Check if you run itEPSS 0.75%May 22, 2025
- High7.0Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator credentials become compromisedThis issue affects ASPECT-EntCheck if you run itEPSS 0.36%May 22, 2025
- Medium6.1One way hash with predictable salt vulnerabilities in ASPECT may expose sensitive information to a potential attackerThis issue affects ASPECT-Enterprise: through 3.*; NEXUS SeriesCheck if you run itEPSS 0.21%May 22, 2025
- Medium6.9Log injection vulnerabilities in ASPECT provide attacker access to inject malicious browser scripts if administrator credentials become compromised.This issue affects ASPECT-EnterpCheck if you run itEPSS 0.42%May 22, 2025
- Medium6.9Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-ECheck if you run itEPSS 0.39%May 22, 2025
- High7.0Large content vulnerabilities are present in ASPECT exposing a device to disk overutilization on a system if administrator credentials become compromisedThis issue affects ASPECT-ECheck if you run itEPSS 0.38%May 22, 2025
- Medium6.9Windows permissions for ASPECT configuration toolsets are not fully secured allow-ing exposure of configuration informationThis issue affects ASPECT-Enterprise: through 3.*; NEXUSCheck if you run itEPSS 0.16%May 22, 2025
- High7.1Device commissioning parameters in ASPECT may be modified by an external source if administrative credentials become compromisedThis issue affects ASPECT-Enterprise: through 3.*; NCheck if you run itEPSS 0.39%May 22, 2025
- High7.1DLL's are not digitally signed when loaded in ASPECT's configuration toolset exposing the application to binary planting during device commissioning.This issue affects ASPECT-EnterCheck if you run itEPSS 1.09%May 22, 2025
- High7.5Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator credentials become compromised.Check if you run itEPSS 0.43%May 22, 2025
- Medium5.9An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resources if session administrator credentials become compromised This issue afCheck if you run itEPSS 0.39%May 22, 2025
- High7.5Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials become compromised.Check if you run itEPSS 0.74%May 22, 2025
- High7.5SQL injection vulnerabilities in ASPECT allow unintended access and manipulation of database repositories if session administrator credentials become compromised.Check if you run itEPSS 0.39%May 22, 2025
- Medium6.0File upload and execute vulnerabilities in ASPECT allow PHP script injection if session administrator credentials become compromised.Check if you run itEPSS 0.36%May 22, 2025
- Medium6.0File upload vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: throuCheck if you run itEPSS 0.36%May 22, 2025
- High8.9Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become compromised This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS SerCheck if you run itEPSS 0.58%May 22, 2025
Sort