Known vulnerabilities in WebHMI
Vendor:
Distributed Data Systems
Software:
WebHMI
Software CPE:
cpe:2.3:a:distributed_data_systems:webhmi:*:*:*:*:*:*:*:*
Total vulnerabilities:
4
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU65075 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2253 |
CWE-78 | Low | - | 11.07.2022 |
SB2022071103 |
||
| #VU65074 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-2254 |
CWE-79 | Low | - | 11.07.2022 |
SB2022071103 |
||
| #VU58507 - Unrestricted Upload of File with Dangerous Type CVE-2021-43936 |
CWE-434 | High | 4.1 | 03.12.2021 |
SB2021120322 |
||
| #VU58506 - Improper Authentication CVE-2021-43931 |
CWE-287 | High | 4.1 | 03.12.2021 |
SB2021120322 |