CVE-2021-20703

CVE-2021-20703 is a buffer overflow vulnerability in NEC CLUSTERPRO X and EXPRESSCLUSTER X, affecting the Transaction Server on Windows up to version 4.3 (and SingleServerSafe variants). The root cause is memory/bounds corruption in the Transaction Server allowing remote code execution via networ...

CVE-2021-20706

CVE-2021-20706 is an improper input validation vulnerability in NEC CLUSTERPRO X and EXPRESSCLUSTER X WebManager that permits a remote attacker to upload files via the network. Affected products and versions include CLUSTERPRO X 4.3 for Windows (and earlier), EXPRESSCLUSTER X 4.3 for Windows (and...

CVE-2021-20700

CVE-2021-20700 affects NEC’s CLUSTERPRO X and EXPRESSCLUSTER X (Windows) up to 4.3 and related SingleServerSafe variants. The vulnerability is a Buffer overflow in the Disk Agent (CWE-119) that can allow remote code execution over the network. Affected components include Disk Agent, Transaction S...

CVE-2021-20701

CVE-2021-20701 affects NEC CLUSTERPRO X 4.3 for Windows and EXPRESSCLUSTER X 4.3 for Windows (and SingleServerSafe variants) with a Disk Agent buffer overflow (CWE-119) that can enable remote code execution over the network. Public documents identify the vulnerable components as Disk Agent and re...

CVE-2022-34822

The CVE-2022-34822 entries describe a path traversal vulnerability in NEC ClusterProX/ExpressCluster X products: CLUSTERPRO X 5.0 and earlier, EXPRESSCLUSTER X 5.0 and earlier, including SingleServerSafe variants, on Windows. The root cause is a relative/path traversal weakness that enables a rem...

CVE-2022-34825

The CVE-2022-34825 issue affects CLUSTERPRO X (5.0 and earlier), EXPRESSCLUSTER X (5.0 and earlier), CLUSTERPRO X SingleServerSafe (5.0 and earlier), and EXPRESSCLUSTER X SingleServerSafe (5.0 and earlier). It stems from an uncontrolled search path element in these products. The vulnerability all...

CVE-2021-20704

Summary of CVE-2021-20704 : NEC’s CLUSTERPRO X and EXPRESSCLUSTER X vulnerable to a buffer overflow in the API compatible with previous versions (Ver 8.0 and earlier). The flaw allows remote code execution over a network on affected software, including CLUSTERPRO X 4.3 for Windows, EXPRESSCLUSTER...

CVE-2021-20705

The CVE-2021-20705 entry concerns NEC CLUSTERPRO/EXPRESSCLUSTER X WebManager with an input-validation vulnerability that allows a remote attacker to upload arbitrary files via the network. Affected products include CLUSTERPRO X 4.3 for Windows and earlier, EXPRESSCLUSTER X 4.3 for Windows and ear...

CVE-2021-20707

CVE-2021-20707 is an input-validation vulnerability in NEC ClusterPRO X and EXPRESSCLUSTER X, specifically affecting the Transaction Server. Multiple sources (NVD/NJC/JVN/Red Hat, PRION) describe that versions up to 4.3 for Windows and earlier, including 4.3 SingleServerSafe variants, allow a rem...

CVE-2022-34823

The connected sources confirm a buffer overflow vulnerability in NEC/ClusterPRO Expresscluster X products: CLUSTERPRO X 5.0 and earlier, EXPRESSCLUSTER X 5.0 and earlier, CLUSTERPRO X SingleServerSafe 5.0 and earlier, and EXPRESSCLUSTER X SingleServerSafe 5.0 and earlier. Root cause is a buffer o...

CVE-2021-20702

CVE-2021-20702 is a buffer overflow vulnerability in NEC CLUSTERPRO X/EXPRESSCLUSTER X products. The Transaction Server component in CLUSTERPRO X 4.3 for Windows and earlier, and EXPRESSCLUSTER X 4.3 for Windows and earlier (including SingleServerSafe variants) is affected, with the underlying is...

CVE-2022-34824

CVE-2022-34824 affects CLUSTERPRO X (v5.0 and earlier), EXPRESSCLUSTER X (v5.0 and earlier), CLUSTERPRO X SingleServerSafe (v5.0 and earlier), and EXPRESSCLUSTER X SingleServerSafe (v5.0 and earlier). The root cause is weak file and folder permissions, enabling a remote unauthenticated attacker t...

CVE-2023-39547

CVE-2023-39547 affects NEC ClusterPROX/EXPRESSCLUSTER X products: CLUSTERPRO X Ver5.1 and earlier, EXPRESSCLUSTER X 5.1 and earlier, and their SingleServerSafe variants (5.1 and earlier). The root issue is an authentication bypass that allows an attacker who can log in to the product to execute a...

CVE-2020-17408

The connected sources confirm a XXE vulnerability in NEC ExpressCluster (clpwebmc) affecting NEC CLUSTERPRO X/EXPRESSCLUSTER X 4.1/4.2. Root cause: improper restriction of XML External Entity references allows remote attackers to disclose sensitive information via specially crafted XML, in the co...

CVE-2023-39544

CVE-2023-39544 affects NEC EXPRESSCLUSTER X and CLUSTERPRO X families (including SingleServerSafe variants) versions 5.1 and earlier. The vulnerability enables an attacker who can log in to the product to execute arbitrary commands on the affected system. Public reports from multiple sources corr...

CVE-2023-39545

CVE-2023-39545 affects NEC EXPRESSCLUSTER X and CLUSTERPRO X family (ExpressCluster X 5.1 and earlier; ClusterPRO X 5.1 and earlier; SingleServerSafe 5.1 and earlier). Description: an attacker who can log in to the product may execute arbitrary commands. Connected sources corroborate login-based ...

CVE-2023-39546

CVE-2023-39546 affects NEC EXPRESSCLUSTER X and CLUSTERPRO X products (including SingleServerSafe) version 5.1 and earlier. The vulnerability allows an authenticated attacker to log in and may execute an arbitrary command on the affected WebUI/WebManager interfaces, as described across multiple s...

CVE-2023-39548

Summary of CVE-2023-39548 : NEC’s CLUSTERPRO X and EXPRESSCLUSTER X (including SingleServerSafe variants) versions 5.1 and earlier are affected. Affects the Web/UI login flow, enabling an attacker who can access the product to log in and may execute arbitrary commands after authentication. Public...

CVE-2016-1145

The CVE-2016-1145 entry describes a directory traversal flaw in NEC EXPRESSCLUSTER X WebManager. Affected: EXPRESSCLUSTER X 3.3 for Windows (build 11.31) and WebManager 3.3 3.3.1-1 for Linux/Solaris. Impact: remote attacker can read arbitrary server files via unspecified vectors. Root cause: dire...