Known vulnerabilities in EXPRESSCLUSTER X SingleServerSafe

Vendor: NEC Corporation
Software: EXPRESSCLUSTER X SingleServerSafe
Software CPE: cpe:2.3:a:nec_corporation:expresscluster_x_singleserversafe:*:*:*:*:*:*:*:*
Website: https://www.nec.com/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting EXPRESSCLUSTER X SingleServerSafe EXPRESSCLUSTER X SingleServerSafe is affected by 9 known vulnerabilities: 5 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83328 - Unrestricted Upload of File with Dangerous Type
CVE-2023-39548		 CWE-434 High
No
No
 5.1.2 21.11.2023 SB2023112112
#VU83326 - Authentication Bypass by Capture-replay
CVE-2023-39547		 CWE-294 Medium
No
No
 5.1.2 21.11.2023 SB2023112112
#VU83325 - Use of Password Hash Instead of Password for Authentication
CVE-2023-39546		 CWE-836 Medium
No
No
 5.1.2 21.11.2023 SB2023112112
#VU83324 - Files or Directories Accessible to External Parties
CVE-2023-39545		 CWE-552 Low
No
No
 5.1.2 21.11.2023 SB2023112112
#VU83323 - Missing Authorization
CVE-2023-39544		 CWE-862 Medium
No
No
 5.1.2 21.11.2023 SB2023112112
#VU71131 - Stack-based buffer overflow
CVE-2022-34823		 CWE-121 High
No
No
 - 12.01.2023 SB2023011228
#VU71130 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-34822		 CWE-22 High
No
No
 - 12.01.2023 SB2023011228
#VU71129 - Uncontrolled Search Path Element
CVE-2022-34825		 CWE-427 High
No
No
 - 12.01.2023 SB2023011228
#VU71127 - Incorrect Default Permissions
CVE-2022-34824		 CWE-276 High
No
No
 - 12.01.2023 SB2023011228