Xceedium Xsuite
6 CVEs affecting Xceedium Xsuite. Latest disclosed: 2018-06-18. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-4664 | Critical | 9.8 | 2018-06-18 | An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers to execute arbitrary commands. |
CVE-2015-4667 | Critical | 9.8 | 2017-09-25 | Multiple hardcoded credentials in Xsuite 2.x. |
CVE-2015-4669 | High | 7.8 | 2017-09-25 | The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system. |
CVE-2015-4668 | Medium | 6.1 | 2017-09-25 | Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a U… |
CVE-2015-4666 | | 2015-08-13 | Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrary files via a ..../… | |
CVE-2015-4665 | | 2015-08-13 | Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML… |