Halvotec Raquest
5 CVEs affecting Halvotec Raquest. Latest disclosed: 2020-03-16. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-19611 | High | 7.5 | 2020-03-13 | An issue was discovered in Halvotec RaQuest 10.23.10801.0. One of the exposed web services allows an anonymous user to access the list of connected users as we… |
CVE-2019-19614 | High | 7.5 | 2020-03-09 | An issue was discovered in Halvotec RAQuest 10.23.10801.0. The login page is vulnerable to wildcard injection, allowing an attacker to enumerate the list of us… |
CVE-2019-19612 | Medium | 5.4 | 2020-03-16 | An issue was discovered in Halvotec RaQuest 10.23.10801.0. Several features of the application allow stored Cross-site Scripting (XSS). Fixed in Release 24.202… |
CVE-2019-19610 | Medium | 5.4 | 2020-03-16 | An issue was discovered in Halvotec RaQuest 10.23.10801.0. It allows session fixation. Fixed in Release 24.2020.20608.0. |
CVE-2019-19613 | Medium | 5.2 | 2020-03-16 | An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the admin application is vulnerable to an Open Redirect attack allowing an attacke… |