SD
Product
Struxureware Data Center Expert
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 15Medium 25Low 2
Watch
Add Struxureware Data Center Expert to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-25550 | 9.8 | Apr 18 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows remote code execution via the “hostname” parameter when maliciously crafted… Affected: through 7.9.2 |
| CVE-2023-25549 | 9.8 | Apr 18 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that allows for remote code execution when using a parameter of the DCE network settings… Affected: through 7.9.2 |
| CVE-2021-22795 | 9.8 | Apr 13 | A CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution when performed over… Affected: through 7.8.1 |
| CVE-2021-22794 | 9.8 | Apr 13 | A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause remote code execution Affected: through 7.8.1 |
| CVE-2018-1126 | 9.8 | May 23 | procps-ng before version 3.3.15 is vulnerable to an incorrect integer size in proc/alloc.* leading to truncation/integer overflow issues Affected: before 7.6.0 |
Showing 5