Login Request a demo
MN
Product
Mashzone Nextgen
by Softwareag · last CVE Apr 5, 2022
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 3Medium 0Low 0
Severity
All severities4Critical1High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mashzone Nextgen to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-33207
9.8
2%
Apr 5
The HTTP client in MashZone NextGen through 10.7 GA deserializes untrusted data when it gets an HTTP response with a 570 status code
Affected: through 10.7
CVE-2021-33523
7.2
2%
Mar 30
MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary commands on the…
Affected: through 10.7
CVE-2021-33581
7.2
1%
Mar 30
MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP services, by abusing the feature to check the availability of a…
Affected: through 10.7
CVE-2021-33208
7.2
1%
Mar 30
The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file
Affected: through 10.7
Showing 4