Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

CRITICAL 9.8 CVE-2022-1400 Use of Hard-coded Cryptographic Key vulnerability in the WebReportsApi.dll of Exago Web Reports, as used in the Device42 Asset Management Appliance, … Cmdb 18.01.00+ Fix from $2,3002022-08-17 CRITICAL 9.1 CVE-2022-1399 An Argument Injection or Modification vulnerability in the "Change Secret" username field as used in the Discovery component of Device42 CMDB allows … Cmdb 18.01.00+ Fix from $2,3002022-08-17 HIGH 8.8 CVE-2022-1410 OS Command Injection vulnerability in the db_optimize component of Device42 Asset Management Appliance allows an authenticated attacker to execute re… Cmdb 18.01.00+ Fix from $1,9502022-08-17 HIGH 7.5 CVE-2022-1401EPSS 18% Improper Access Control vulnerability in the /Exago/WrImageResource.adx route as used in Device42 Asset Management Appliance allows an unauthenticate… Cmdb 18.01.00+ Fix from $1,9502022-08-17 HIGH 8.8 CVE-2021-41315 The Device42 Remote Collector before 17.05.01 does not sanitize user input in its SNMP Connectivity utility. This allows an authenticated attacker (w… Remote Collector 17.05.01+ Fix from $1,9502021-09-17 HIGH 8.1 CVE-2021-41316 The Device42 Main Appliance before 17.05.01 does not sanitize user input in its Nmap Discovery utility. An attacker (with permissions to add or edit … Device42 17.05.01+ Fix from $1,9502021-09-17