Notifylink@enterprise server Security Vulnerabilities and Issues — Notifylink@enterprise server CVE List

Lucene search

Notify TechnologyNotifylinkenterprise server

4 matches found

CVE•added 2005/05/02 4:0 a.m.•48 views

CVE-2005-0812

The web interface in NotifyLink 3.0 displays passwords in cleartext on the administrative page, which could allow remote attackers or local users to obtain sensitive information.

5CVSS6.3AI score0.01153EPSS

CVE•added 2005/05/02 4:0 a.m.•43 views

CVE-2005-0809

NotifyLink, when configured for client key retrieval, allows remote attackers to obtain AES keys via a direct request to /hwp/get.asp, then uses a weak encryption scheme (fixed byte reordering) to protect the key, which allows remote attackers to obtain the key via a brute force attack.

7.5CVSS6.6AI score0.00565EPSS

CVE•added 2005/05/02 4:0 a.m.•36 views

CVE-2005-0810

SQL injection vulnerability in NotifyLink before 3.0 allows remote attackers to execute arbitrary SQL commands via the URL.

7.5CVSS8.4AI score0.0071EPSS

CVE•added 2005/05/02 4:0 a.m.•30 views

CVE-2005-0811

The web interface in NotifyLink 3.0 does not properly restrict access to functions that have been disabled in the GUI, which allows remote authenticated users to bypass intended restrictions via a direct request to certain URLs.

4.6CVSS6.3AI score0.0019EPSS