17 matches found
CVE-2022-26281
BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue...
Design/Logic Flaw
BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue...
CVE-2022-26281
BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue...
CVE-2022-23347
BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks...
CVE-2022-23346
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues...
CVE-2022-23352
An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service DoS...
CVE-2022-23345
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control...
CVE-2022-23349
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery CSRF...
Directory traversal
BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks...
CVE-2022-23345
CVE-2022-23345 concerns BigAnt Software BigAnt Server v5.6.06 with an incorrect access control vulnerability. The root cause is access control misconfigurations that could expose confidential data (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5, HIGH; CVSSv2: base 5.0, MEDIUM). Public ex...
CVE-2022-23345
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control...
CVE-2022-23346
Technical details about CVE-2022-23346 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories for affected products and fixes.
CVE-2022-23346
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues...
CVE-2022-23348
BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes...
CVE-2022-23350
CVE-2022-23350 corresponds to a cross-site scripting (XSS) vulnerability in BigAnt Server v5.6.06. Multiple connected sources (Red Hat CVE, CNVD, NVD, etc.) confirm the affected product and version, identifying an XSS issue but without public technical details in these documents about the exact r...
CVE-2022-23349
CVE-2022-23349 affects BigAnt Software BigAnt Server v5.6.06 and is described as a Cross-Site Request Forgery (CSRF) vulnerability. Public references (NVD, Red Hat, CNVD, CVE lists) consistently identify CSRF as the issue; no exploit details or in-the-wild activity are provided in the connected s...
CVE-2022-23347
BigAnt Server v5.6.06 is reported as vulnerable to Local File Inclusion (LFI). The Nuclei template specifies that an LFI condition could allow unauthorized access to sensitive files and may lead to remote code execution, compromising the server. Remediation guidance in the template is to apply th...