Easyvirt Co2scope
6 CVEs affecting Easyvirt Co2scope. Latest disclosed: 2025-01-31. Critical: 3, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-55062 | Critical | 9.8 | 2025-01-31 | Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/licen… |
CVE-2024-53356 | Critical | 9.8 | 2025-01-31 | Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC se… |
CVE-2024-57587 | Critical | 9.1 | 2025-01-31 | Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL comm… |
CVE-2024-53355 | High | 8.8 | 2025-01-31 | Multiple incorrect access control issues in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1)… |
CVE-2024-53357 | High | 7.5 | 2025-01-31 | Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1) ad… |
CVE-2024-53354 | Medium | 6.5 | 2025-01-31 | Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers to execute arbitrary SQL comman… |