ES
Product
Enterprise Security Manager
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 1Low 0
Watch
Add Enterprise Security Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-11482 | 9.8 | Nov 29 | A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user Affected: 11.6.10 |
| CVE-2023-3314 | 8.8 | Jul 3 | A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s) Affected: before 11.6.7 |
| CVE-2024-11481 | 8.2 | Nov 29 | A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API Affected: 11.6.10 |
| CVE-2023-3313 | 7.8 | Jul 3 | An OS common injection vulnerability exists in the ESM certificate API, whereby incorrectly neutralized special elements may have allowed an unauthorized user to execute system… Affected: before 11.6.7 |
| CVE-2023-6071 | 7.2 | Nov 30 | An Improper Neutralization of Special Elements used in a command vulnerability in ESM prior to version 11.6.9 allows a remote administrator to execute arbitrary code as root on… Affected: before 11.6.9 |
| CVE-2023-6070 | 4.3 | Nov 29 | A server-side request forgery vulnerability in ESM prior to version 11.6.8 allows a low privileged authenticated user to upload arbitrary content, potentially altering… Affected: before 11.6.8 |
Showing 6