| CVE-2024-28020 |
A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application
and server management
|
8.0
Élevée
|
11 juin 2024 |
| CVE-2024-28024 |
A vulnerability exists in the FOXMAN-UN/UNEM in which sensitive information is stored in cleartext within a resource…
|
4.1
Moyenne
|
11 juin 2024 |
| CVE-2024-28022 |
A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary…
|
6.5
Moyenne
|
11 juin 2024 |
| CVE-2024-28023 |
A vulnerability exists in the message queueing mechanism that if exploited can lead to the exposure of resources or…
|
5.7
Moyenne
|
11 juin 2024 |
| CVE-2024-28021 |
A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate…
|
7.4
Élevée
|
11 juin 2024 |
| CVE-2024-2011 |
A heap-based buffer overflow vulnerability exists in the FOXMAN-UN/UNEM that if exploited will generally lead to a…
|
8.6
Élevée
|
11 juin 2024 |
| CVE-2024-2012 |
vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow…
|
9.1
Critique
|
11 juin 2024 |
| CVE-2024-2013 |
An authentication bypass vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway component that if exploited…
|
10.0
Critique
|
11 juin 2024 |
| CVE-2024-2462 |
Allow attackers to intercept or falsify data exchanges between the client
and the server
|
6.8
Moyenne
|
11 juin 2024 |
| CVE-2023-1711 |
A vulnerability exists in a FOXMAN-UN and UNEM logging component, it only affects systems that use remote authentication…
|
4.0
Moyenne
|
30 mai 2023 |
| CVE-2022-3929 |
Communication between the client and the server application of the affected products is partially done using CORBA…
|
8.3
Élevée
|
5 janv. 2023 |
| CVE-2022-3928 |
Hardcoded credential is found in affected products' message queue
|
7.1
Élevée
|
5 janv. 2023 |
| CVE-2022-3927 |
The affected products store both public and private key that are used to sign and protect Custom Parameter Set (CPS)…
|
8.0
Élevée
|
5 janv. 2023 |
| CVE-2021-40342 |
In the DES implementation, the affected product versions use a default key for encryption
|
7.1
Élevée
|
5 janv. 2023 |
| CVE-2021-40341 |
DES cipher, which has inadequate encryption strength, is used Hitachi Energy FOXMAN-UN to encrypt user credentials…
|
7.1
Élevée
|
5 janv. 2023 |