Loytec Lvis-3me
4 CVEs affecting Loytec Lvis-3me. Latest disclosed: 2017-10-05. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-13996 | High | 8.8 | 2017-10-05 | A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web user interface fails to prevent access to critical files tha… |
CVE-2017-13992 | High | 8.1 | 2017-10-05 | An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not utilize sufficiently random number generation… |
CVE-2017-13998 | High | 7.5 | 2017-10-05 | An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The application does not sufficiently protect sensitiv… |
CVE-2017-13994 | Medium | 6.1 | 2017-10-05 | A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allo… |