Known vulnerabilities in Secure Integration Server

Vendor: Softing AG
Software: Secure Integration Server
Software CPE: cpe:2.3:a:softing_ag:secure_integration_server:*:*:*:*:*:*:*:*
Website: https://data-intelligence.softing.com/
Total vulnerabilities: 15
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Secure Integration Server Secure Integration Server is affected by 15 known vulnerabilities: 1 high, 5 medium, 9 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79360 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-29377		 CWE-22 Low
No
No
 - 10.08.2023 SB2023081018
#VU79359 - Exposure of resource to wrong sphere
CVE-2023-39478		 CWE-668 Low
No
No
 - 10.08.2023 SB2023081018
#VU79358 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-39479		 CWE-22 Low
No
No
 - 10.08.2023 SB2023081018
#VU79352 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-39480		 CWE-94 Low
No
No
 - 10.08.2023 SB2023081018
#VU79351 - Interpretation Conflict
CVE-2023-39481		 CWE-436 Low
No
No
 - 10.08.2023 SB2023081018
#VU79343 - Use of Hard-coded Cryptographic Key
CVE-2023-39482		 CWE-321 Low
No
No
 - 10.08.2023 SB2023081018
#VU66741 - Cleartext Transmission of Sensitive Information
CVE-2022-2338		 CWE-319 Low
No
No
 1.30 24.08.2022 SB2022081710
#VU66740 - Integer underflow
CVE-2022-2335		 CWE-191 Medium
No
No
 1.30 24.08.2022 SB2022081710
#VU66739 - Improper Authentication
CVE-2022-2336		 CWE-287 High
No
No
 1.30 24.08.2022 SB2022081710
#VU66738 - Uncontrolled Search Path Element
CVE-2022-2334		 CWE-427 Low
Available
No
 1.30 24.08.2022 SB2022081710
SB2022021835
#VU66583 - NULL Pointer Dereference
CVE-2022-2547		 CWE-476 Medium
No
No
 1.30 17.08.2022 SB2022081710
#VU66582 - NULL Pointer Dereference
CVE-2022-1748		 CWE-476 Medium
No
No
 1.30 17.08.2022 SB2022081710
#VU66581 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-1373		 CWE-22 Low
Available
No
 1.30 17.08.2022 SB2022081710
#VU66580 - Out-of-bounds read
CVE-2022-1069		 CWE-125 Medium
No
No
 1.30 17.08.2022 SB2022081710
#VU65249 - NULL Pointer Dereference
CVE-2022-2337		 CWE-476 Medium
Available
No
 1.30 13.07.2022 SB2022081710