Lucene search
+L

5 matches found

NVD
NVD
•added 2021/08/10 10:15 p.m.•25 views

CVE-2021-37425

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key...

9.1CVSS0.66278EPSS
SaveExploits4References4
attackerkb
attackerkb
•added 2021/08/10 10:15 p.m.•8 views

CVE-2021-37425

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key...

9.1CVSS7.1AI score0.66278EPSS
SaveExploits4References5
Prion
Prion
•added 2021/08/10 10:15 p.m.•27 views

Design/Logic Flaw

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key...

6.4CVSS7.8AI score0.66278EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
•added 2021/08/10 9:16 p.m.•29 views

CVE-2021-37425

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key...

8.7AI score0.66278EPSS
SaveExploits4References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/10 12:00 a.m.•2 views

CVE-2021-37425: Improper Restriction of XML External Entity Reference

Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key...

9.1CVSS5.8AI score0.66278EPSS
SaveExploits4References2
Rows per page
Query Builder