Escan Management Console Security Vulnerabilities and Issues — Escan Management Console CVE List

Lucene search

EscanavEscan Management Console

4 matches found

CVE•added 2023/05/17 1:15 p.m.•35 views

CVE-2023-31702

SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1.

7.2CVSS7.7AI score0.01639EPSS

CVE•added 2023/05/31 8:15 p.m.•34 views

CVE-2023-33732

Cross Site Scripting (XSS) in the New Policy form in Microworld Technologies eScan management console 14.0.1400.2281 allows a remote attacker to inject arbitrary code via the vulnerable parameters type, txtPolicyType, and Deletefileval.

6.1CVSS6.1AI score0.00393EPSS

CVE•added 2023/05/17 1:15 p.m.•29 views

CVE-2023-31703

Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter.

9CVSS8.5AI score0.01316EPSS

CVE•added 2023/05/31 8:15 p.m.•29 views

CVE-2023-33730

Privilege Escalation in the "GetUserCurrentPwd" function in Microworld Technologies eScan Management Console 14.0.1400.2281 allows any remote attacker to retrieve password of any admin or normal user in plain text format.

9.8CVSS9.4AI score0.0119EPSS