Lucene search

Moduweb Vision Security Vulnerabilities

cve

CVE-2015-7914

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password.

8.1CVSS

8.3AI Score

0.004EPSS

2016-02-06 05:59 AM

cve

CVE-2015-7915

Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.

9.8CVSS

9AI Score

0.005EPSS

2016-02-06 05:59 AM

cve

CVE-2015-7916

Cross-site scripting (XSS) vulnerability in Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted query.

6.5CVSS

5.7AI Score

0.001EPSS

2016-02-06 05:59 AM