Lucene search
+L

6 matches found

OSV
OSV
•added 2021/01/20 8:15 p.m.•14 views

CVE-2020-27859

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEuaLogDownloadAction class. The issue results from the lack of...

7.5CVSS7.1AI score0.02899EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/20 8:15 p.m.•46 views

CVE-2020-27859

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEuaLogDownloadAction class. The issue results from the lack of...

7.5CVSS7.3AI score0.02899EPSS
SaveExploits0References1
Prion
Prion
•added 2021/01/20 8:15 p.m.•28 views

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEuaLogDownloadAction class. The issue results from the lack of...

5CVSS7.3AI score0.02899EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/20 12:00 a.m.•8 views

CVE-2020-27859: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager 6.42. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEuaLogDownloadAction class. The issue results from the lack of...

7.5CVSS5.9AI score0.02899EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/06/25 12:00 a.m.•3 views

PT-2020-16814

Name of the Vulnerable Software and Affected Versions NEC ESMPRO Manager version 6.42 Description This issue allows remote attackers to disclose sensitive information on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the...

7.5CVSS0.02899EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
•added 2020/06/25 12:00 a.m.•46 views

(0Day) NEC ESMPRO Manager GetEuaLogDownloadAction Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ESMPRO Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEuaLogDownloadAction class. The issue results from the lack of proper...

7.5CVSS3AI score0.02899EPSS
SaveExploits0
Rows per page
Query Builder