Skip to main content

Servisign

3 CVEs product

Monthly

CVE-2020-3927 Feb 03, 11:15 HIGH This Week

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Path Traversal Servisign Changingtec
NVD
CVSS 3.1
7.5
EPSS
1.2%
CVE-2020-3926 Feb 03, 11:15 HIGH This Week

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Path Traversal Servisign Changingtec
NVD
CVSS 3.1
7.5
EPSS
1.5%
CVE-2020-3925 Feb 03, 11:15 HIGH This Week

A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Servisign Changingtec
NVD
CVSS 3.1
8.8
EPSS
2.8%
EPSS 1% CVSS 7.5
HIGH This Week

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Path Traversal Servisign +1
NVD
EPSS 1% CVSS 7.5
HIGH This Week

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Path Traversal Servisign +1
NVD
EPSS 3% CVSS 8.8
HIGH This Week

A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Servisign Changingtec
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy