Opswat Metadefender
4 CVEs affecting Opswat Metadefender. Latest disclosed: 2022-09-19. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-32272 | Critical | 9.8 | 2022-06-09 | OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, res… |
CVE-2018-16275 | High | 7.8 | 2018-08-31 | OPSWAT MetaDefender before v4.11.2 allows CSV injection. |
CVE-2022-40778 | Medium | 5.4 | 2022-09-19 | A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary JavaScript or HTML bec… |
CVE-2022-32273 | Medium | 4.3 | 2022-06-08 | As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate fi… |