Known vulnerabilities in WebCTRL

Known vulnerabilities in WebCTRL

Vendor: Automated Logic Corporation

Software: WebCTRL

Software CPE: cpe:2.3:a:automated_logic_corporation:webctrl:*:*:*:*:*:*:*:*

Website: https://www.automatedlogic.com/

Total vulnerabilities: 8

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU100925 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2024-8526	CWE-601	Medium	No	No	8.0	26.11.2024	SB2024112637 SB2024112638
#VU100924 - Unrestricted Upload of File with Dangerous Type CVE-2024-8525	CWE-434	High	No	No	8.0	26.11.2024	SB2024112637 SB2024112638
#VU62444 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2022-1019	CWE-601	Low	No	No	-	20.04.2022	SB2022042002
#VU37031 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2018-8819	CWE-611	Medium	No	No	-	14.06.2018	SB2018061415
#VU8070 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2016-5795	CWE-611	Low	No	No	-	01.09.2017	SB2017090105
#VU7998 - Unrestricted Upload of File with Dangerous Type CVE-2017-9650	CWE-434	High	Available	No	-	23.08.2017	SB2017082301
#VU7997 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2017-9640	CWE-22	High	Available	No	-	23.08.2017	SB2017082301
#VU7996 - Unquoted Search Path or Element CVE-2017-9644	CWE-428	Low	Available	No	-	23.08.2017	SB2017082301