Basware
7 CVEs across 1 Basware products. Browse Basware vulnerabilities, severities, and proof-of-concept exploits.
Basware products with known CVEs
Basware CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2015-6747 | | | 2015-08-31 | Basware Banking (Maksuliikenne) 8.90.07.X does not properly prevent access to private keys, which allows remote attackers to spoof communications with banks vi… |
CVE-2015-6746 | | | 2015-08-31 | Basware Banking (Maksuliikenne) before 8.90.07.X stores private keys in plaintext in the SQL database, which allows remote attackers to spoof communications wi… |
CVE-2015-6745 | | | 2015-08-31 | Basware Banking (Maksuliikenne) 8.90.07.X relies on the client to enforce account locking, which allows local users to bypass that security mechanism by deleti… |
CVE-2015-6744 | | | 2015-08-31 | Basware Banking (Maksuliikenne) before 8.90.07.X relies on the client to enforce (1) login verification, (2) audit trail creation, and (3) account locking, whi… |
CVE-2015-6743 | | | 2015-08-31 | Basware Banking (Maksuliikenne) 8.90.07.X uses a hardcoded password for an unspecified account, which allows remote authenticated users to bypass intended acce… |
CVE-2015-6742 | | | 2015-08-31 | Basware Banking (Maksuliikenne) before 8.90.07.X uses a hardcoded password for the ANCO account, which allows remote authenticated users to bypass intended acc… |
CVE-2015-0943 | | | 2015-08-31 | Basware Banking (Maksuliikenne) before 9.10.0.0 does not encrypt communication between the client and the backend server, which allows man-in-the-middle attack… |