Known vulnerabilities in VBASE Pro-RT/ Server-RT (Web Remote)

Vendor: Visam
Software: VBASE Pro-RT/ Server-RT (Web Remote)
Software CPE: cpe:2.3:a:visam:vbase_pro-rt_server-rt_web_remote:*:*:*:*:*:*:*:*
Website: https://www.visam.de/start.php
Total vulnerabilities: 9
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting VBASE Pro-RT/ Server-RT (Web Remote) VBASE Pro-RT/ Server-RT (Web Remote) is affected by 9 known vulnerabilities: 2 high, 3 medium, 4 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU57976 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2005-2475		 CWE-362 Low
No
No
 11.7.0.2 08.11.2021 SB2005080501
SB2021110802
#VU57975 - Uncontrolled Search Path Element
CVE-2021-34803		 CWE-427 High
No
No
 11.7.0.2 08.11.2021 SB2021061625
SB2021110802
#VU57974 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-42537		 CWE-611 Medium
No
No
 11.7.0.2 08.11.2021 SB2021110802
#VU57973 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-42535		 CWE-79 Low
No
No
 11.7.0.2 08.11.2021 SB2021110802
#VU57972 - Improper Access Control
CVE-2021-95907		 CWE-284 Medium
No
No
 11.7.0.2 08.11.2021 SB2021110802
#VU42044 - Unquoted Search Path or Element
CVE-2020-13699		 CWE-428 High
Available
No
 11.7.0.2 10.08.2020 SB2020081024
SB2021110802
#VU27102 - Use of Hard-coded Cryptographic Key
CVE-2019-18988		 CWE-321 Low
No
Exploited
 11.7.0.2 22.04.2020 SB2020042207
SB2021110802
#VU22562 - Improper Control of Interaction Frequency
CVE-2018-16550		 CWE-799 Medium
No
No
 11.7.0.2 06.11.2019 SB2018090623
SB2019110703
SB2021110802
#VU14011 - Exposure of sensitive information to an unauthorized actor
CVE-2018-14333		 CWE-200 Low
No
No
 11.7.0.2 23.07.2018 SB2018072612
SB2019110703
SB2021110802