Vembu Offsite_dr
4 CVEs affecting Vembu Offsite_dr. Latest disclosed: 2021-06-08. Critical: 3, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26472 | Critical | 10.0 | 2021-06-08 | In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using this command… |
CVE-2021-26473 | Critical | 9.8 | 2021-06-08 | In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php action logFilePath allows an attacker to write arbitra… |
CVE-2021-26471 | Critical | 9.8 | 2021-06-08 | In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1, the http API located at /sgwebservice_o.php accepts a command argument. Using this command argume… |
CVE-2021-26474 | High | 8.6 | 2021-06-08 | Various Vembu products allow an attacker to execute a (non-blind) http-only Cross Site Request Forgery (Other products or versions of products in this family m… |