Known vulnerabilities in eMerge E3-Series

Vendor: Nice North America
Software: eMerge E3-Series
Software CPE: cpe:2.3:h:linear:emerge_e3-series:*:*:*:*:*:*:*:*
Website: https://linear-solutions.com/
Total vulnerabilities: 14
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting eMerge E3-Series eMerge E3-Series is affected by 14 known vulnerabilities: 5 critical, 2 high, 4 medium, 3 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87823 - Permissions, Privileges, and Access Controls
CVE-2019-7258		 CWE-264 Medium
No
No
 - 26.03.2024 SB2019051137
#VU87822 - Improper Access Control
CVE-2019-7259		 CWE-284 Medium
No
No
 - 26.03.2024 SB2019051137
#VU87821 - Insufficient Control Flow Management
CVE-2019-7263		 CWE-691 Low
No
No
 - 26.03.2024 SB2019051137
#VU87820 - Use of Hard-coded Credentials
CVE-2019-7265		 CWE-798 Critical
Available
No
 - 26.03.2024 SB2019051137
#VU87819 - Unprotected Storage of Credentials
CVE-2019-7260		 CWE-256 Low
No
No
 - 26.03.2024 SB2019051137
#VU87818 - Use of Hard-coded Credentials
CVE-2019-7261		 CWE-798 Critical
No
No
 - 26.03.2024 SB2019051137
#VU87817 - Stack-based buffer overflow
CVE-2019-7264		 CWE-121 High
No
No
 - 26.03.2024 SB2019051137
#VU87816 - Cross-Site Request Forgery (CSRF)
CVE-2019-7262		 CWE-352 Medium
Available
No
 - 26.03.2024 SB2019051137
#VU87815 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2019-7254		 CWE-98 Critical
Available
No
 - 26.03.2024 SB2019051137
#VU87814 - Unrestricted Upload of File with Dangerous Type
CVE-2019-7257		 CWE-434 Critical
Available
No
 - 26.03.2024 SB2019051137
#VU87813 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-7256		 CWE-78 Critical
Available
Exploited
 - 26.03.2024 SB2019051137
#VU87812 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-7255		 CWE-79 Low
Available
No
 - 26.03.2024 SB2019051137
#VU87811 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-7253		 CWE-22 Medium
No
No
 - 26.03.2024 SB2019051137
#VU87810 - Use of Default Credentials
CVE-2019-7252		 CWE-1392 High
No
No
 - 26.03.2024 SB2019051137