ID
Product
Igss Data Server
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 3Low 0
Watch
Add Igss Data Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-27984 | 8.8 | Mar 21 | A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to remote code execution when a user opens… Affected: through 16.0.0.23040 |
| CVE-2023-27981 | 8.8 | Mar 21 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a… Affected: through 16.0.0.23040 |
| CVE-2023-27982 | 8.8 | Mar 21 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report… Affected: through 16.0.0.23040 |
| CVE-2023-27980 | 8.8 | Mar 21 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation of a malicious report file in the IGSS… Affected: through 16.0.0.23040 |
| CVE-2023-27978 | 7.8 | Mar 21 | A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to… Affected: through 16.0.0.23040 |
Showing 5