MP
Product
Mds Pulsenet
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add Mds Pulsenet to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10611 | 9.8 | Jun 4 | Java remote method invocation (RMI) input port in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior may be exploited to allow unauthenticated users to launch… Affected: through 3.2.1; through 3.2.1 |
| CVE-2018-10615 | 8.1 | Jun 4 | Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1 and prior host platform Affected: through 3.2.1; through 3.2.1 |
| CVE-2018-10613 | 7.5 | Jun 4 | Multiple variants of XML External Entity (XXE) attacks may be used to exfiltrate data from the host Windows platform in GE MDS PulseNET and MDS PulseNET Enterprise version 3.2.1… Affected: through 3.2.1; through 3.2.1 |
| CVE-2015-6459 | – | Sep 18 | Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote… Affected: through 3.1.3; through 3.1.3 |
| CVE-2015-6456 | – | Sep 18 | GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 have hardcoded credentials for a support account, which allows remote attackers to obtain administrative… Affected: through 3.1.3; through 3.1.3 |
Showing 5