AO
Product
Axis OS 2018
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 1Low 0
Watch
Add Axis OS 2018 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-31988 | 8.8 | Oct 5 | A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and… Affected: before 8.40.4.3 |
| CVE-2023-21415 | 8.1 | Oct 16 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion Affected: before 8.40.35 |
| CVE-2021-31987 | 7.5 | Oct 5 | A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients Affected: before 8.40.4.3 |
| CVE-2023-21418 | 7.1 | Nov 21 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion Affected: before 8.40.35 |
| CVE-2021-31986 | 6.8 | Oct 5 | User controlled parameters related to SMTP notifications are not correctly validated Affected: before 8.40.4.3 |
Showing 5
