Lucene search
EginnovationsEg Manager
3 matches found
CVE-2020-8591
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request.
9.8CVSS9.4AI score0.00137EPSS
CVE-2020-8592
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feature).
9.8CVSS9.8AI score0.00307EPSS
CVE-2022-29594
eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.
7.8CVSS7.8AI score0.0003EPSS