CVE-2025-54339

An Incorrect Access Control vulnerability exists in the Application Server component of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . This flaw allows a remote attacker to achieve Escalation of Privileges . While the vulnerability is confirmed to be exploitable remotely, specific te...

CVE-2025-54348

The Desktop Alert PingAlert network status monitoring tool (versions 6.1.0.11 through 6.1.1.2 ) contains a Stored Cross-Site Scripting (XSS) vulnerability in its Application Server . The root cause is a lack of effective filtering and escaping of user-supplied data , allowing an attacker to injec...

CVE-2025-54345

The Application Server of Desktop Alert PingAlert (versions 6.1.0.11 through 6.1.1.2 ) is vulnerable to an information disclosure vulnerability. This flaw allows an unauthorized actor to access sensitive information from the network status monitoring tool. While the specific root cause is not det...

CVE-2025-54343

An Incorrect Access Control vulnerability exists in the Application Server component of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . This flaw allows for remote Escalation of Privileges . To mitigate this vulnerability, users are recommended to update Desktop Alert PingAlert to a v...

CVE-2025-54562

The Application Server of Desktop Alert PingAlert (versions 6.1.0.11 through 6.1.1.2 ) is vulnerable to a flaw that allows for the disclosure of technical information via stack traces . An attacker could exploit this vulnerability to compromise confidentiality . To remediate this issue, it is rec...

CVE-2025-54342

The Application Server of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 is vulnerable to an information disclosure flaw. The root cause is identified as incompatible policies , which can be exploited by attackers to expose sensitive information . To remediate this vulnerability, it is...

CVE-2025-54560

Desktop Alert PingAlert (versions 6.1.0.11 through 6.1.1.2 ) contains a Server-side Request Forgery (SSRF) vulnerability in its Application Server component. The root cause is the server's failure to implement sufficient authentication mechanisms to verify the origin of requests. An attacker can ...

CVE-2025-54338

An Incorrect Access Control vulnerability exists in the Application Server component of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . This flaw allows an attacker to disclose user hashes . To remediate this issue, it is recommended to update the software to a version later than 6.1....

CVE-2025-54347

A Directory Traversal vulnerability exists in the Application Server of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . This flaw, categorized as CWE-22 , allows an attacker to write arbitrary files under certain conditions. Practical consequences include the ability for unauthorized ...

CVE-2025-54340

A vulnerability exists in the Application Server component of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . The flaw is caused by the use of broken or risky cryptographic algorithms , which could allow an attacker to compromise confidentiality . To mitigate this risk, it is recommen...

CVE-2025-54563

An Incorrect Access Control vulnerability exists in the Application Server component of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . This flaw allows for Remote Information Disclosure . To mitigate this risk, users are recommended to update to a version later than 6.1.1.2 .

CVE-2025-54561

An Incorrect Access Control vulnerability exists in the Application Server of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . The root cause is a Broken Authorization Schema , which allows an attacker to remotely access unauthorized content without the correct permissions. Remediation...

CVE-2025-54346

A Reflected Cross Site Scripting (XSS) vulnerability exists in the Application Server of Desktop Alert PingAlert versions 6.1.0.11 to 6.1.1.2 . The flaw allows an attacker to inject malicious scripts through a specially crafted request, potentially leading to browser hijacking and the capture of ...

CVE-2025-54559

The Application Server of Desktop Alert PingAlert (versions 6.1.0.11 through 6.1.1.2 ) is vulnerable to a Path Traversal issue. The root cause is the software's failure to properly filter special elements in the path of a resource or file, which allows an attacker to perform remote Path Traversal...

CVE-2025-54341

A security vulnerability exists in the Application Server component of Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 . The root cause is the presence of hard-coded configuration values , which is categorized as CWE-798 (Use of Hard-coded Credentials). The impact of this vulnerability ...