Login Request a demo
B2
Product
BioStar 2
by supremainc · last CVE Sep 14, 2026
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 0High 8Medium 1Low 0
Severity
All severities9Critical0High8Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add BioStar 2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-33366
8.8
1%
Aug 3
A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives into an SQL statement and execute…
Affected: before 2.9.1
CVE-2023-33364
8.8
2%
Aug 3
An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS commands on the BioStar 2 server
Affected: before 2.9.1
CVE-2023-31923
8.8
1%
May 22
Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions
Affected: before 2.9.1
CVE-2022-38351
8.8
1%
Sep 19
A vulnerability in Suprema BioStar (aka Bio Star) 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the update profile page
Affected: 2.8.16
CVE-2026-31278
7.7
0%
Sep 14
An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service…
Affected: before 2.9.12
CVE-2023-33365
7.5
1%
Aug 3
A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files from the server's web server
Affected: before 2.9.1
CVE-2023-33363
7.5
1%
Aug 3
An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functionality on BioStar 2 servers
Affected: before 2.9.1
CVE-2020-15050
7.5
51%
Jul 13
An issue was discovered in the Video Extension in Suprema BioStar 2 before 2.8.2
Affected: before 2.8.2
Showing 8