SD
Product
Struxureware Data Center Expert
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 15Medium 25Low 2
Watch
Add Struxureware Data Center Expert to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-37197 | 8.8 | Jul 12 | A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on… Affected: through 7.9.3 |
| CVE-2023-37196 | 8.8 | Jul 12 | A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user already authenticated on… Affected: through 7.9.3 |
| CVE-2023-25547 | 8.8 | Apr 18 | A CWE-863: Incorrect Authorization vulnerability exists that could allow remote code execution on upload and install packages when a hacker is using a low privileged user account Affected: through 7.9.2 |
| CVE-2018-7807 | 8.8 | Nov 30 | Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the server Affected: through 7.5.0 |
| CVE-2018-2814 | 8.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: before 7.6.0 |
| CVE-2018-2633 | 8.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: before 7.6.0 |
| CVE-2023-25555 | 8.1 | Apr 18 | A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could allow a user that knows the credentials to… Affected: through 7.9.2 |
| CVE-2023-25552 | 8.1 | Apr 18 | A CWE-862: Missing Authorization vulnerability exists that could allow viewing of unauthorized content, changes or deleting of content, or performing unauthorized functions when… Affected: through 7.9.2 |
| CVE-2023-25554 | 7.8 | Apr 18 | A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that allows a local privilege escalation on the appliance… Affected: through 7.9.2 |
| CVE-2018-1124 | 7.8 | May 23 | procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec function Affected: before 7.6.0 |
| CVE-2018-2794 | 7.7 | Apr 19 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security) Affected: before 7.6.0 |
| CVE-2018-2811 | 7.7 | Apr 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install) Affected: before 7.6.0 |
| CVE-2018-2637 | 7.4 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX) Affected: before 7.6.0 |
| CVE-2023-37199 | 7.2 | Jul 12 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tampers with backups… Affected: through 7.9.3 |
| CVE-2023-37198 | 7.2 | Jul 12 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE uploads or tampers with… Affected: through 7.9.3 |
Showing 15