Known vulnerabilities in dnaLIMS

Vendor: dnaTools, Inc.
Software: dnaLIMS
Software CPE: cpe:2.3:a:dnatools:dnalims:*:*:*:*:*:*:*:*
Website: https://dnatools.mskcc.org/
Total vulnerabilities: 4
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting dnaLIMS dnaLIMS is affected by 4 known vulnerabilities: 3 high, 1 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU6897 - Command injection
CVE-2017-6526		 CWE-77 High
Available
No
 - 02.06.2017 SB2017060232
#VU39478 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-6527		 CWE-22 Medium
Available
No
 - 09.03.2017 SB2017030902
#VU39479 - Insufficiently Protected Credentials
CVE-2017-6528		 CWE-522 High
No
No
 - 09.03.2017 SB2017030902
#VU39480 - Insufficient Session Expiration
CVE-2017-6529		 CWE-613 High
No
No
 - 09.03.2017 SB2017030902