| CVE-2024-51551 |
Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default…
|
10.0
Critical
|
Dec 5, 2024 |
| CVE-2024-51550 |
Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected…
|
9.3
Critical
|
Dec 5, 2024 |
| CVE-2024-51549 |
Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products:…
|
10.0
Critical
|
Dec 5, 2024 |
| CVE-2024-51548 |
Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise…
|
8.7
High
|
Dec 5, 2024 |
| CVE-2024-51546 |
Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB…
|
8.7
High
|
Dec 5, 2024 |
| CVE-2024-51545 |
Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. …
|
9.3
Critical
|
Dec 5, 2024 |
| CVE-2024-51543 |
Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB…
|
8.8
High
|
Dec 5, 2024 |
| CVE-2024-51542 |
Configuration Download vulnerabilities allow access to dependency configuration information. Affected products: ABB…
|
8.2
High
|
Dec 5, 2024 |
| CVE-2024-51541 |
Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT -…
|
8.8
High
|
Dec 5, 2024 |
| CVE-2024-48847 |
MD5 Checksum Bypass vulnerabilities where found exploiting a weakness in the way an application dependency calculates or…
|
8.8
High
|
Dec 5, 2024 |
| CVE-2024-48846 |
Cross Site Request Forgery vulnerabilities where found providing a potiential for exposing sensitive information or…
|
7.1
High
|
Dec 5, 2024 |
| CVE-2024-48845 |
Weak Password Reset Rules vulnerabilities where found providing a potiential for the storage of weak passwords that…
|
9.3
Critical
|
Dec 5, 2024 |
| CVE-2024-48844 |
Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products:…
|
7.7
High
|
Dec 5, 2024 |
| CVE-2024-48843 |
Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products:…
|
7.7
High
|
Dec 5, 2024 |
| CVE-2024-48840 |
Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise…
|
9.3
Critical
|
Dec 5, 2024 |
| CVE-2024-48839 |
Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise…
|
10.0
Critical
|
Dec 5, 2024 |
| CVE-2024-11317 |
Session Fixation vulnerabilities allow an attacker to fix a users session identifier before login providing an…
|
10.0
Critical
|
Dec 5, 2024 |
| CVE-2024-11316 |
Fileszie Check vulnerabilities allow a malicious user to bypass size limits or overload to the product. Affected…
|
7.5
High
|
Dec 5, 2024 |
| CVE-2024-6784 |
Server-Side Request Forgery vulnerabilities were found providing a potential for access to unauthorized resources and…
|
8.7
High
|
Dec 5, 2024 |
| CVE-2024-6516 |
Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a…
|
9.3
Critical
|
Dec 5, 2024 |
| CVE-2024-6515 |
Web browser interface may manipulate application username/password in clear text or Base64 encoding providing a higher…
|
8.7
High
|
Dec 5, 2024 |