CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

NVD•added 2021/08/10 10:15 p.m.•29 views

CVE-2021-37425

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key...

9.1CVSS0.66278EPSS

SaveExploits4References4

attackerkb•added 2021/08/10 10:15 p.m.•11 views

CVE-2021-37425

9.1CVSS7.1AI score0.66278EPSS

SaveExploits4References5

Prion•added 2021/08/10 10:15 p.m.•31 views

Design/Logic Flaw

6.4CVSS7.8AI score0.66278EPSS

SaveExploits4References4Affected Software1

Cvelist•added 2021/08/10 9:16 p.m.•33 views

CVE-2021-37425

8.7AI score0.66278EPSS

SaveExploits4References4

Positive Technologies•added 2021/08/10 12:00 a.m.•7 views

PT-2021-21649

Name of the Vulnerable Software and Affected Versions Altova MobileTogether Server versions prior to 7.3 SP1 Description The issue allows XXE attacks. Specifically, it enables attacks such as InfoSetChanges/Changes against the "/workflowmanagement" API endpoint, or reading the...

9.1CVSS5.7AI score0.66278EPSS

SaveExploits4References9

Rapid7 Vulnerability Database (full)•added 2021/08/10 12:00 a.m.•8 views

CVE-2021-37425: Improper Restriction of XML External Entity Reference

9.1CVSS5.8AI score0.66278EPSS

SaveExploits4References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by