CVE-2022-23348

BigAnt Server 5.6.06 is affected by weak password hashes and improper access control. Multiple connected sources corroborate that BigAnt Server v5.6.06 uses weak password hashes, enabling an attacker to potentially craft hashes and gain access to sensitive information or perform unauthorized oper...

CVE-2022-23347

BigAnt Server v5.6.06 is reported as vulnerable to Local File Inclusion (LFI). The Nuclei template specifies that an LFI condition could allow unauthorized access to sensitive files and may lead to remote code execution, compromising the server. Remediation guidance in the template is to apply th...

CVE-2022-23346

Technical details about CVE-2022-23346 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories for affected products and fixes.

CVE-2022-23352

CVE-2022-23352 affects BigAnt Software BigAnt Server v5.6.06 and can lead to a Denial of Service (DoS). Multiple connected sources (Red Hat advisory, CNVD, CNNVD, CVE lists) confirm a DoS impact but do not provide technical details such as root cause, vulnerable component, exploit vectors, or con...

CVE-2022-23350

CVE-2022-23350 corresponds to a cross-site scripting (XSS) vulnerability in BigAnt Server v5.6.06. Multiple connected sources (Red Hat CVE, CNVD, NVD, etc.) confirm the affected product and version, identifying an XSS issue but without public technical details in these documents about the exact r...

CVE-2022-23349

CVE-2022-23349 affects BigAnt Software BigAnt Server v5.6.06 and is described as a Cross-Site Request Forgery (CSRF) vulnerability. Public references (NVD, Red Hat, CNVD, CVE lists) consistently identify CSRF as the issue; no exploit details or in-the-wild activity are provided in the connected s...

CVE-2022-23345

CVE-2022-23345 concerns BigAnt Software BigAnt Server v5.6.06 with an incorrect access control vulnerability. The root cause is access control misconfigurations that could expose confidential data (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5, HIGH; CVSSv2: base 5.0, MEDIUM). Public ex...

CVE-2022-26281

CVE-2022-26281 affects BigAnt Server v5.6.06. The root cause is an incorrect access control issue. Public documents describe impact at a high level (NVD metrics: CVSSv3.1 base score 7.5; network attack vector; no privileges required; confidentiality impact High; no integrity/availability impact)....

CVE-2025-0364

CVE-2025-0364 (BigAntSoft BigAnt Server) affects BigAntSoft BigAnt Server up to and including version 5.6.06. The vulnerability allows unauthenticated remote code execution via the default SaaS account registration, where an attacker can create an administrative user and then upload/execute arbit...

CVE-2009-4661

CVE-2009-4661 affects BigAnt Server 2.50 SP6 and earlier. The issue is multiple buffer overflows in ZIP handling that allow user‑assisted remote attackers to cause an application crash (DoS) when the victim triggers the (1) Update or (2) Plug‑In console menu item. The provided sources confirm the...