Login Request a demo
LP
Product
License Plate Verifier
by Axis · last CVE Aug 3, 2023
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 2High 4Medium 0Low 0
Severity
All severities6Critical2High4Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add License Plate Verifier to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-21409
9.8
1%
Aug 3
Due to insufficient file permissions, unprivileged users could gain access to unencrypted administrator credentials allowing the configuration of the application
Affected: through 2.8.3
CVE-2023-21408
9.8
1%
Aug 3
Due to insufficient file permissions, unprivileged users could gain access to unencrypted user credentials that are used in the integration interface towards 3rd party systems
Affected: through 2.8.3
CVE-2023-21412
8.8
1%
Aug 3
User provided input is not sanitized on the AXIS License Plate Verifier specific “search.cgi” allowing for SQL injections
Affected: through 2.8.3
CVE-2023-21411
8.8
1%
Aug 3
User provided input is not sanitized in the “Settings > Access Control” configuration interface allowing for arbitrary code execution
Affected: through 2.8.3
CVE-2023-21410
8.8
1%
Aug 3
User provided input is not sanitized on the AXIS License Plate Verifier specific “api.cgi” allowing for arbitrary code execution
Affected: through 2.8.3
CVE-2023-21407
8.8
1%
Aug 3
A broken access control was found allowing for privileged escalation of the operator account to gain administrator privileges
Affected: through 2.8.3
Showing 6