Vulnerability index

Browse CVEs

5 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Web Central HIGH 8.8

CVE-2022-45165

An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-controlled parameter that is used…

Mitigation only

Fix from $1,950 2023-01-10

Web Central CRITICAL 9.8

CVE-2022-28862

In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr. Through the inj…

Fix: 26.2+

Fix from $2,300 2022-05-25

Web Central CRITICAL 9.8

CVE-2021-41553

In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), the Web Application in /archibus/login.axvw assign a session token that could be already in…

Mitigation only

Fix from $2,300 2021-10-05

Web Central HIGH 8.8

CVE-2021-41554

ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functionality in these affected endp…

No fix yet

Fix from $1,950 2021-10-05

Web Central MEDIUM 6.1

CVE-2021-41555

In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkflowRule.dwr because the data re…

Mitigation only

Fix from $1,600 2021-10-05