EU
Product
Easy Ups Online Monitoring Software
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 0Low 0
Watch
Add Easy Ups Online Monitoring Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-42973 | 7.8 | Feb 1 | A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database Affected: before 2.5-gs-01-22320; before 2.5-gs |
| CVE-2022-42972 | 7.8 | Feb 1 | A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker modifies the webroot… Affected: before 2.5-gs-01-22320; before 2.5-gs |
| CVE-2023-29413 | 7.5 | Apr 18 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on the Schneider UPS… Affected: through 2.5-gs-01-22320 |
| CVE-2023-6407 | 7.1 | Dec 14 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause arbitrary file deletion upon service restart when… Affected: before 2.6-ga-01-23248 |
Showing 4