Synametrics Synaman
6 CVEs affecting Synametrics Synaman. Latest disclosed: 2022-04-06. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-3140 | High | 8.8 | 2019-11-21 | Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTai… |
CVE-2022-26250 | High | 7.8 | 2022-04-06 | Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges. |
CVE-2018-10814 | High | 7.8 | 2018-09-14 | Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials. |
CVE-2022-22828 | High | 7.5 | 2022-01-27 | An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modifie… |
CVE-2022-26251 | High | 7.2 | 2022-04-06 | The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges. |
CVE-2018-10763 | Medium | 4.8 | 2018-09-14 | Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial Bra… |