Altools

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-7809 May 15, 15:15 MEDIUM This Month

ALSong 3.46 and earlier version contain a Document Object Model (DOM) based cross-site scripting vulnerability caused by improper validation of user input. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Altools Alsong

NVD

CVSS 3.1

6.1

EPSS

0.6%

CVE-2019-12808 Aug 13, 20:15 HIGH This Week

ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Altools Estsoft

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2020-7809

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS Altools Alsong

NVD

CVE-2019-12808

EPSS 0% CVSS 7.8

HIGH This Week

Privilege Escalation RCE Altools +1

NVD