Known vulnerabilities in Connect-IT

Vendor: HPE
Software: Connect-IT
Software CPE: cpe:2.3:a:hpe:connect-it:*:*:*:*:*:*:*:*
Website: https://www.hpe.com
Total vulnerabilities: 4
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Connect-IT Connect-IT is affected by 4 known vulnerabilities: 1 critical, 3 medium Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU5373 - Exposure of sensitive information to an unauthorized actor
CVE-2014-0160		 CWE-200 Critical
Available
Exploited
 - 25.01.2017 SB2014040101
SB2015092619
SB2014040801
and 28 more
#VU5214 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2014-3566		 CWE-327 Medium
Available
No
 - 20.01.2017 SB2014101601
SB2014102102
SB2016022401
and 78 more
#VU90 - Exposure of sensitive information to an unauthorized actor
CVE-2015-2808		 CWE-200 Medium
No
No
 - 05.07.2016 SB2015040102
SB2015040103
SB2023011274
and 27 more
#VU86 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2015-4000		 CWE-300 Medium
Available
No
 - 04.07.2016 SB2015071003
SB2015070202
SB2015072201
and 36 more