Known vulnerabilities in SnapCreek Duplicator

Vendor: SnapCreek
Software CPE: cpe:2.3:a:snapcreek:duplicator:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SnapCreek Duplicator SnapCreek Duplicator is affected by 8 known vulnerabilities: 1 critical, 1 high, 2 medium, 4 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30308 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-11738
CWE-22 Medium
Available
Exploited
1.3.28 14.04.2020 SB2020041495
#VU25481 - Improper Authentication
CWE-287 Medium
No
No
1.3.28 20.02.2020 SB2020022008
#VU31203 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-17207
CWE-94 High
No
No
1.2.42 19.09.2018 SB2018091906
#VU14794 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4625
CWE-79 Low
Available
No
- 18.09.2018 SB2013081001
#VU14793 - Improper Access Control
CVE-2014-9262
CWE-284 Low
Available
No
0.5.10 18.09.2018 SB2017080711
SB2015021901
#VU14792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-16815
CWE-79 Low
No
No
1.2.30 18.09.2018 SB2017111433
SB2017110704
#VU14791 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-7543
CWE-79 Low
Available
No
1.2.34 17.09.2018 SB2018033014
SB2018031523
#VU14790 - Improper Access Control
CWE-284 Critical
No
Exploited
1.2.42 17.09.2018 SB2018090513