Browse CVEs

HIGH 7.8 CVE-2024-4454 WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalat… Client Security Mitigation only Fix from $1,9502024-05-22 MEDIUM 6.7 CVE-2024-23764 Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15 and later, WithSecure Server Security 15 and… Client Security No fix yet Fix from $1,6002024-02-08 HIGH 7.8 CVE-2023-47172 Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure E… Client Security Mitigation only Fix from $1,9502023-11-20 HIGH 7.5 CVE-2023-47263 Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. This affects WithSecure Client … Client Security Mitigation only Fix from $1,9502023-11-16 HIGH 7.5 CVE-2023-47264 Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS). This affects With… Client Security Mitigation only Fix from $1,9502023-11-16 CRITICAL 9.8 CVE-2023-43762 Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and P… F Secure Policy Manager Mitigation only Fix from $2,3002023-09-22 MEDIUM 6.1 CVE-2023-43763 Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux. F Secure Policy Manager Mitigation only Fix from $1,6002023-09-22 HIGH 7.5 CVE-2023-42524 Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithS… Client Security Mitigation only Fix from $1,9502023-09-18 HIGH 7.5 CVE-2023-42525 Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. This affects WithSecure Client Security 15, WithS… Client Security Mitigation only Fix from $1,9502023-09-18 HIGH 7.5 CVE-2023-42521 Certain WithSecure products allow a remote crash of a scanning engine via processing of a compressed file. This affects WithSecure Client Security 15… Client Security Mitigation only Fix from $1,9502023-09-18 HIGH 7.5 CVE-2023-42522 Certain WithSecure products allow a remote crash of a scanning engine via processing of an import struct in a PE file. This affects WithSecure Client… Client Security Mitigation only Fix from $1,9502023-09-18 HIGH 7.5 CVE-2023-42523 Certain WithSecure products allow a remote crash of a scanning engine via unpacking of a PE file. This affects WithSecure Client Security 15, WithSec… Client Security Mitigation only Fix from $1,9502023-09-18 HIGH 7.5 CVE-2023-42520 Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. This affects WithSecure Client Security 15… Client Security Mitigation only Fix from $1,9502023-09-18 HIGH 7.5 CVE-2023-42526 Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. This affects WithSecure Client Securit… Client Security Mitigation only Fix from $1,9502023-09-18 CRITICAL 9.8 CVE-2022-38165 Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in arbitrary loca… F Secure Policy Manager Mitigation only Fix from $2,3002022-11-17 MEDIUM 6.1 CVE-2022-38162 Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10) exists within the F-Secure Policy Manager due to an unvalidate… F Secure Policy Manager Mitigation only Fix from $1,6002022-10-25 HIGH 7.5 CVE-2022-28884 A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking … Business Suite Mitigation only Fix from $1,9502022-09-06