AO
Product
Axis OS 2020
7
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 1Low 0
Watch
Add Axis OS 2020 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5800 | 8.8 | Feb 5 | Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API create_overlay.cgi did not have a sufficient input validation allowing for a possible remote code… Affected: before 9.80.55 |
| CVE-2021-31988 | 8.8 | Oct 5 | A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and… Affected: before 9.80.3.5 |
| CVE-2023-21415 | 8.1 | Oct 16 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion Affected: before 9.80.47 |
| CVE-2021-31987 | 7.5 | Oct 5 | A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients Affected: before 9.80.3.5 |
| CVE-2023-21418 | 7.1 | Nov 21 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion Affected: before 9.80.49 |
| CVE-2023-21417 | 7.1 | Nov 21 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder… Affected: before 9.80.49 |
| CVE-2021-31986 | 6.8 | Oct 5 | User controlled parameters related to SMTP notifications are not correctly validated Affected: before 9.80.3.5 |
Showing 7