Known vulnerabilities in EXPRESSCLUSTER X

Known vulnerabilities in EXPRESSCLUSTER X

Vendor: NEC Corporation

Software: EXPRESSCLUSTER X

Software CPE: cpe:2.3:a:nec_corporation:expresscluster_x:*:*:*:*:*:*:*:*

Website: https://www.nec.com/

Total vulnerabilities: 19

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (19)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU118205 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-11546	CWE-78	High	No	No	-	07.11.2025	SB2025110756
#VU83328 - Unrestricted Upload of File with Dangerous Type CVE-2023-39548	CWE-434	High	No	No	5.1.2	21.11.2023	SB2023112112
#VU83326 - Authentication Bypass by Capture-replay CVE-2023-39547	CWE-294	Medium	No	No	5.1.2	21.11.2023	SB2023112112
#VU83325 - Use of Password Hash Instead of Password for Authentication CVE-2023-39546	CWE-836	Medium	No	No	5.1.2	21.11.2023	SB2023112112
#VU83324 - Files or Directories Accessible to External Parties CVE-2023-39545	CWE-552	Low	No	No	5.1.2	21.11.2023	SB2023112112
#VU83323 - Missing Authorization CVE-2023-39544	CWE-862	Medium	No	No	5.1.2	21.11.2023	SB2023112112
#VU71131 - Stack-based buffer overflow CVE-2022-34823	CWE-121	High	No	No	-	12.01.2023	SB2023011228
#VU71130 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-34822	CWE-22	High	No	No	-	12.01.2023	SB2023011228
#VU71129 - Uncontrolled Search Path Element CVE-2022-34825	CWE-427	High	No	No	-	12.01.2023	SB2023011228
#VU71127 - Incorrect Default Permissions CVE-2022-34824	CWE-276	High	No	No	-	12.01.2023	SB2023011228
#VU57777 - Improper input validation CVE-2021-20707	CWE-20	Medium	No	No	-	29.10.2021	SB2021102904
#VU57776 - Improper input validation CVE-2021-20706	CWE-20	Medium	No	No	-	29.10.2021	SB2021102904
#VU57775 - Improper input validation CVE-2021-20705	CWE-20	Medium	No	No	-	29.10.2021	SB2021102904
#VU57774 - Memory corruption CVE-2021-20704	CWE-119	High	No	No	-	29.10.2021	SB2021102904
#VU57773 - Memory corruption CVE-2021-20703	CWE-119	High	No	No	-	29.10.2021	SB2021102904
#VU57772 - Memory corruption CVE-2021-20702	CWE-119	High	No	No	-	29.10.2021	SB2021102904
#VU57771 - Memory corruption CVE-2021-20701	CWE-119	High	No	No	-	29.10.2021	SB2021102904
#VU57770 - Memory corruption CVE-2021-20700	CWE-119	High	No	No	-	29.10.2021	SB2021102904
#VU46132 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-17408	CWE-611	Medium	No	No	-	31.08.2020	SB2020083106