Stormshield Endpoint Security
15 CVEs affecting Stormshield Endpoint Security. Latest disclosed: 2023-06-27. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-45090 | Critical | 9.8 | 2021-12-21 | Stormshield Endpoint Security before 2.1.2 allows remote code execution. |
CVE-2021-31225 | High | 7.3 | 2021-07-13 | SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administrat… |
CVE-2021-35957 | Medium | 6.7 | 2021-07-13 | Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C+… |
CVE-2022-4304 | Medium | 5.9 | 2023-02-08 | A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichen… |
CVE-2021-31223 | Medium | 5.7 | 2021-07-13 | SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed. |
CVE-2021-31222 | Medium | 5.7 | 2021-07-13 | SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed. |
CVE-2021-31221 | Medium | 5.7 | 2021-07-13 | SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed. |
CVE-2023-35799 | Medium | 5.5 | 2023-06-27 | Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SES Evolution agent to create arbitrary f… |
CVE-2023-23561 | Medium | 5.5 | 2023-05-30 | Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information. |
CVE-2021-45089 | Medium | 5.2 | 2021-12-21 | Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control. |
CVE-2021-31220 | Medium | 5.2 | 2021-07-13 | SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies. |
CVE-2023-35800 | Medium | 4.3 | 2023-06-27 | Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent… |
CVE-2023-23562 | Medium | 4.3 | 2023-05-31 | Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters. |
CVE-2021-45091 | Medium | 4.3 | 2021-12-21 | Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control. |
CVE-2021-31224 | Low | 3.5 | 2021-07-13 | SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies. |