Skip to main content

Cognito

3 CVEs product

Monthly

CVE-2018-14891 Sep 21, 21:29 HIGH This Week

Management Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local privilege escalation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Cognito
NVD
CVSS 3.0
7.8
EPSS
0.3%
CVE-2018-14890 Sep 21, 21:29 MEDIUM This Month

Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting (XSS) vulnerability in the Web Management Console. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Cognito
NVD
CVSS 3.0
5.4
EPSS
0.5%
CVE-2017-9615 Jun 26, 07:29 CRITICAL Act Now

Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes the administrator password to a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Moneyworks Cognito
NVD GitHub
CVSS 3.0
9.8
EPSS
0.3%
EPSS 0% CVSS 7.8
HIGH This Week

Management Console in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local privilege escalation vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Cognito
NVD
EPSS 1% CVSS 5.4
MEDIUM This Month

Vectra Networks Cognito Brain and Sensor before 4.2 contains a cross-site scripting (XSS) vulnerability in the Web Management Console. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Cognito
NVD
EPSS 0% CVSS 9.8
CRITICAL Act Now

Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbose logging writes the administrator password to a. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Moneyworks Cognito
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy