Archibus Web Central
5 CVEs affecting Archibus Web Central. Latest disclosed: 2023-01-10. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28862 | Critical | 9.8 | 2022-05-25 | In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr. Through the injection of… |
CVE-2021-41553 | Critical | 9.8 | 2021-10-05 | In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), the Web Application in /archibus/login.axvw assign a session token that could be already in use by an… |
CVE-2021-41554 | High | 8.8 | 2021-10-05 | ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functionality in these affected endpoints: /ar… |
CVE-2022-45165 | Medium | 6.5 | 2023-01-10 | An issue was discovered in Archibus Web Central 2022.03.01.107. A service exposed by the application accepts a user-controlled parameter that is used to create… |
CVE-2021-41555 | Medium | 6.1 | 2021-10-05 | In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkflowRule.dwr because the data received as… |