SO
Product
Symphony + Operations
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 0Low 0
Watch
Add Symphony + Operations to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-24683 | 9.8 | Dec 22 | The affected versions of S+ Operations (version 2.1 SP1 and earlier) used an approach for user authentication which relies on validation at the client node (client-side… Affected: 1.1; 2.0; 2.1; 2.1; 3.0; 3.1; +2 more |
| CVE-2020-24679 | 9.8 | Dec 22 | A S+ Operations and S+ Historian service is subject to a DoS by special crafted messages Affected: 1.1; 2.0; 2.1; 2.1; 3.0; 3.1; +2 more |
| CVE-2020-24675 | 9.8 | Dec 22 | In S+ Operations and S+ History, it is possible that an unauthenticated user could inject values to the Operations History server (or standalone S+ History server) and ultimately… Affected: 1.1; 2.0; 2.1; 2.1; 3.0; 3.1; +2 more |
| CVE-2020-24673 | 9.8 | Dec 22 | In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute… Affected: 1.1; 2.0; 2.1; 2.1; 3.0; 3.1; +2 more |
Showing 4