Known vulnerabilities in MELFA-Works 4.3

Vendor: Mitsubishi Electric
Software: MELFA-Works
Version: 4.3
Software CPE: cpe:2.3:a:mitsubishi_electric:melfa-works:*:*:*:*:*:*:*:*
Website: https://www.mitsubishielectric.com/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting MELFA-Works version 4.3 MELFA-Works 4.3 is affected by 3 vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32955 - Permissions, Privileges, and Access Controls
CVE-2020-14496		 CWE-264 Medium
No
No
 4.4 31.07.2020 SB2020073114
#VU29430 - Resource exhaustion
CVE-2020-5603		 CWE-400 Medium
No
No
 4.4 01.07.2020 SB2020070113
#VU29429 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-5602		 CWE-611 Medium
No
No
 4.4 01.07.2020 SB2020070113