Thermostat

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-3201 LOW POC Monitor

Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to obtain user credentials by reading the file. Rated low severity (CVSS 2.1), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Thermostat

NVD

CVSS 2.0

2.1

EPSS

0.0%

CVE-2014-8120 MEDIUM PATCH This Month

The agent in Thermostat before 1.0.6, when using unspecified configurations, allows local users to obtain the JMX management URLs of all local Java virtual machines and gain privileges via unknown. Rated medium severity (CVSS 4.4).

Information Disclosure Java Thermostat

NVD

CVSS 2.0

4.4

EPSS

0.1%

CVE-2015-3201

EPSS 0% CVSS 2.1

LOW POC Monitor

Information Disclosure Thermostat

NVD

CVE-2014-8120

EPSS 0% CVSS 4.4

MEDIUM PATCH This Month

Information Disclosure Java Thermostat

NVD