Infinite-automation-systems
8 CVEs tracked since 2015. Since Jan 2015, none of them reached CISA KEV.
Infinite-automation-systems CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2015-01 | 1 | 0 |
| 2015-02 | null or fewer | |
| 2015-03 | null or fewer | |
| 2015-04 | null or fewer | |
| 2015-05 | null or fewer | |
| 2015-06 | null or fewer | |
| 2015-07 | null or fewer | |
| 2015-08 | null or fewer | |
| 2015-09 | null or fewer | |
| 2015-10 | 7 | 0 |
Products
The products that kept showing up in Infinite-automation-systems's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 8 most recently published vulnerabilities affecting Infinite-automation-systems.
- CVE-2015-7903SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.6.5
- CVE-2015-7902Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for failed login attempts in unspecified circumstances, which allows remote attackers t...5.0
- CVE-2015-7900Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive debugging information by entering a crafted URL to trigger an exception, and ...4.3
- CVE-2015-7904Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP code via vectors inv...6.5
- CVE-2015-7901Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.6.5
- CVE-2015-6493Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to hijack the authentication of uns...6.8
- CVE-2015-6494Cross-site scripting (XSS) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to inject arbitrary web script or HTML via ...3.5
- CVE-2015-1179Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dpid, ...4.3
The record
- Peak rank
- #21 in Oct 2015
- Busiest month shown
- Oct 2015, 7 CVEs
- Months with a KEV entry
- 0 since Jan 2015
- Monthly snapshots
- 2 since 2015