Easyvirt

8 CVEs across 3 Easyvirt products. Browse Easyvirt vulnerabilities, severities, and proof-of-concept exploits.

Easyvirt products with known CVEs

ProductCVEs
Co2scope6
Dcscope6
Dc Netscope2
Easyvirt CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-55063High8.82025-05-19Multiple Code Injection vulnerabilities in EasyVirt DC NetScope <= 8.7.0 allows remote authenticated attackers to execute arbitrary code via the (1) lang param…
CVE-2024-55064Medium5.42025-03-03Multiple cross-site scripting (XSS) vulnerabilities in EasyVirt DC NetScope <= 8.6.4 allow remote attackers to inject arbitrary JavaScript or HTML code via the…
CVE-2024-57587Critical9.12025-01-31Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL comm…
CVE-2024-55062Critical9.82025-01-31Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/licen…
CVE-2024-53357High7.52025-01-31Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1) ad…
CVE-2024-53356Critical9.82025-01-31Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC se…
CVE-2024-53355High8.82025-01-31Multiple incorrect access control issues in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1)…
CVE-2024-53354Medium6.52025-01-31Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers to execute arbitrary SQL comman…