Known vulnerabilities in mymbCONNECT24

Vendor: MB connect line
Software: mymbCONNECT24
Software CPE: cpe:2.3:a:mb_connect_line:mymbconnect24:*:*:*:*:*:*:*:*
Website: https://mbconnectline.com/
Total vulnerabilities: 22
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mymbCONNECT24 mymbCONNECT24 is affected by 22 known vulnerabilities: 1 high, 13 medium, 8 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU51209 - Improper Privilege Management
CVE-2020-10384		 CWE-269 Low
No
No
 2.71 03.03.2021 SB2021030312
#VU51208 - Insufficiently Protected Credentials
CVE-2020-35570		 CWE-522 Medium
No
No
 2.71 03.03.2021 SB2021030312
#VU51207 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35569		 CWE-79 Low
No
No
 2.71 03.03.2021 SB2021030312
#VU51206 - Exposure of sensitive information to an unauthorized actor
CVE-2020-35568		 CWE-200 Medium
No
No
 2.71 03.03.2021 SB2021030312
#VU51205 - Use of Hard-coded Credentials
CVE-2020-35567		 CWE-798 Low
No
No
 - 03.03.2021 SB2021030313
#VU51204 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2020-35566		 CWE-98 Medium
No
No
 2.71 03.03.2021 SB2021030312
#VU51203 - Improper Restriction of Excessive Authentication Attempts
CVE-2020-35565		 CWE-307 Medium
No
No
 - 03.03.2021 SB2021030313
#VU51202 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35564		 CWE-79 Low
No
No
 2.71 03.03.2021 SB2021030312
#VU51201 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-35563		 CWE-79 Low
No
No
 2.71 03.03.2021 SB2021030312
#VU51200 - Server-Side Request Forgery (SSRF)
CVE-2020-35561		 CWE-918 Medium
No
No
 - 03.03.2021 SB2021030313
#VU51199 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-35560		 CWE-601 Medium
No
No
 2.71 03.03.2021 SB2021030312
#VU51195 - Resource exhaustion
CVE-2020-35559		 CWE-400 Low
No
No
 2.71 03.03.2021 SB2021030312
#VU51192 - Server-Side Request Forgery (SSRF)
CVE-2020-35558		 CWE-918 Medium
No
No
 2.71 03.03.2021 SB2021030312
#VU51191 - Improper Privilege Management
CVE-2020-35557		 CWE-269 Medium
No
No
 2.71 03.03.2021 SB2021030312
#VU51190 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-12530		 CWE-79 Low
No
No
 2.71 03.03.2021 SB2021030312
#VU51186 - Server-Side Request Forgery (SSRF)
CVE-2020-12529		 CWE-918 Medium
No
No
 2.71 03.03.2021 SB2021030312
#VU51185 - Improper Privilege Management
CVE-2020-12528		 CWE-269 Medium
No
No
 2.71 03.03.2021 SB2021030312
#VU51184 - Improper Privilege Management
CVE-2020-12527		 CWE-269 Medium
No
No
 2.71 03.03.2021 SB2021030312
#VU47171 - Command injection
 CWE-77 High
No
No
 2.6.2 30.09.2020 SB2020093062
#VU47168 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-24569		 CWE-89 Medium
No
No
 2.6.2 30.09.2020 SB2020093062


Showing elements 1 - 20 out of 22