Authentication Server

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-4098 MEDIUM POC This Month

ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message parameter. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Code Injection Authentication Server

NVD Exploit-DB

CVSS 2.0

5.0

EPSS

4.9%

CVE-2013-4097 MEDIUM POC This Month

ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in a -REG-E-OPEN error. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Path Traversal Authentication Server

NVD Exploit-DB

CVSS 2.0

5.0

EPSS

5.3%

CVE-2013-4096 CRITICAL POC Act Now

ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOST_NAME field. Rated critical severity (CVSS 9.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Authentication Server

NVD Exploit-DB

CVSS 2.0

9.0

EPSS

4.0%

CVE-2013-4098

EPSS 5% CVSS 5.0

MEDIUM POC This Month

Code Injection Authentication Server

NVD Exploit-DB

CVE-2013-4097

EPSS 5% CVSS 5.0

MEDIUM POC This Month

Path Traversal Authentication Server

NVD Exploit-DB

CVE-2013-4096

EPSS 4% CVSS 9.0

CRITICAL POC Act Now

Information Disclosure Authentication Server

NVD Exploit-DB