Known vulnerabilities in MELSOFT iQ AppPortal

Vendor: Mitsubishi Electric
Software: MELSOFT iQ AppPortal
Software CPE: cpe:2.3:a:mitsubishi_electric:melsoft_iq_appportal:*:*:*:*:*:*:*:*
Website: https://www.mitsubishielectric.com/
Total vulnerabilities: 14
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MELSOFT iQ AppPortal MELSOFT iQ AppPortal is affected by 14 known vulnerabilities: 1 critical, 3 high, 8 medium, 2 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83865 - External Control of File Name or Path
CVE-2023-5247		 CWE-73 High
No
No
 - 05.12.2023 SB2023120514
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 1.32J 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Available
No
 1.32J 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 1.29F 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720		 CWE-444 Medium
No
No
 1.29F 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61284 - Out-of-bounds write
CVE-2022-23943		 CWE-787 High
No
No
 1.29F 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Available
No
 1.29F 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798		 CWE-476 Medium
No
No
 1.29F 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56063 - Memory corruption
CVE-2021-3711		 CWE-119 High
No
No
 1.29F 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 53 more
#VU53779 - Improper Privilege Management
CVE-2020-13938		 CWE-269 Low
No
No
 1.29F 03.06.2021 SB2021060320
SB2021060321
SB2021071308
and 5 more
#VU53776 - NULL Pointer Dereference
CVE-2021-26691		 CWE-476 Low
No
No
 1.29F 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 26 more
#VU32954 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-14523		 CWE-22 Medium
No
No
 - 31.07.2020 SB2020073115
#VU29430 - Resource exhaustion
CVE-2020-5603		 CWE-400 Medium
No
No
 1.14Q 01.07.2020 SB2020070113
#VU29429 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-5602		 CWE-611 Medium
No
No
 1.14Q 01.07.2020 SB2020070113