Login Request a demo
MA
Product
Mango Automation
by Infinite Automation Systems · last CVE Oct 28, 2015
8
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities8Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mango Automation to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2015-7904
–
3%
Oct 28
Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP…
Affected: 2.5.0; 2.5.5; 2.6.0
CVE-2015-7903
–
1%
Oct 28
SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via…
Affected: 2.5.0; 2.5.5; 2.6.0
CVE-2015-7902
–
3%
Oct 28
Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows…
Affected: 2.5.0; 2.5.5; 2.6.0
CVE-2015-7901
–
3%
Oct 28
Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors
Affected: 2.5.0; 2.5.5; 2.6.0
CVE-2015-7900
–
3%
Oct 28
Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger…
Affected: 2.5.0; 2.5.5; 2.6.0
CVE-2015-6494
–
2%
Oct 28
Cross-site scripting (XSS) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to inject arbitrary web…
Affected: 2.5.0; 2.5.5; 2.6.0
CVE-2015-6493
–
1%
Oct 28
Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to hijack the…
Affected: 2.5.0; 2.5.5; 2.6.0
CVE-2015-1179
–
2%
Jan 26
Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML…
Affected: through 2.4.0
Showing 8