Scrutisweb Security Vulnerabilities
Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an unauthenticated user to directly access any file outside the webroot.
7.5CVSS
8AI Score
0.001EPSS
Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a remotecode execution vulnerability that could allow an unauthenticated user toupload a malicious payload and execute it.
10CVSS
9.6AI Score
0.002EPSS
Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to decrypt encrypted passwords into plaintext.
5.5CVSS
6.4AI Score
0.0004EPSS
Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that could allow an unauthenticated user to view profile information, including user login names and encrypted passwords.
7.5CVSS
7.9AI Score
0.001EPSS