Marvalglobal

8 CVEs across 2 Marvalglobal products. Browse Marvalglobal vulnerabilities, severities, and proof-of-concept exploits.

Marvalglobal products with known CVEs

ProductCVEs
Marval Msm5
Msm3
Marvalglobal CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-33284High8.82023-06-07Marval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability. A remote attacker authenticated as any user is able to execute code in con…
CVE-2023-33283Medium5.52023-06-07Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them by using this ke…
CVE-2023-33282Critical9.82023-06-07Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials. A remote attacker is able to login and create a valid session. This ma…
CVE-2022-31887Critical9.82022-06-28Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organization, this means t…
CVE-2022-31884Medium6.52022-06-28Marval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low privilege user to delete other users API Keys including high privileg…
CVE-2022-31886Medium6.52022-06-28Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending the user a malicious form.
CVE-2022-31885Critical9.82022-06-28Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.
CVE-2022-31883High8.82022-06-28Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users API Keys including t…