Known vulnerabilities in SiteScan Web

Vendor: Automated Logic Corporation
Software: SiteScan Web
Software CPE: cpe:2.3:a:automated_logic_corporation:sitescan_web:*:*:*:*:*:*:*:*
Website: https://www.automatedlogic.com/
Total vulnerabilities: 6
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SiteScan Web SiteScan Web is affected by 6 known vulnerabilities: 3 high, 1 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100925 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2024-8526		 CWE-601 Medium
No
No
 8.0 26.11.2024 SB2024112637
SB2024112638
#VU100924 - Unrestricted Upload of File with Dangerous Type
CVE-2024-8525		 CWE-434 High
No
No
 8.0 26.11.2024 SB2024112637
SB2024112638
#VU8070 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2016-5795		 CWE-611 Low
No
No
 - 01.09.2017 SB2017090105
#VU7998 - Unrestricted Upload of File with Dangerous Type
CVE-2017-9650		 CWE-434 High
Available
No
 - 23.08.2017 SB2017082301
#VU7997 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-9640		 CWE-22 High
Available
No
 - 23.08.2017 SB2017082301
#VU7996 - Unquoted Search Path or Element
CVE-2017-9644		 CWE-428 Low
Available
No
 - 23.08.2017 SB2017082301