CVE Tools
Track your stack

Marvalglobal

5 CVEs tracked since 2022. Since Jun 2022, none of them reached CISA KEV.

Marvalglobal CVEs per month

Jun 2022 to Jun 2022. Point at a month, or focus the strip and use the arrow keys.
Marvalglobal CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2022-0650

Products

The products that kept showing up in Marvalglobal's monthly top three, with their CVEs summed over those months.

  1. Marval Msm51 month

Latest CVEs

The 8 most recently published vulnerabilities affecting Marvalglobal.

  1. CVE-2023-33282Marval MSM through 14.19.0.12476 and 15.0 has a System account with default credentials. A remote attacker is able to login and create a valid session. This makes it possible to make backend calls ...9.8
  2. CVE-2023-33284Marval MSM through 14.19.0.12476 and 15.0 has a Remote Code Execution vulnerability. A remote attacker authenticated as any user is able to execute code in context of the web server.8.8
  3. CVE-2023-33283Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them by using this key.5.5
  4. CVE-2022-31887Marval MSM v14.19.0.12476 has a 0-Click Account Takeover vulnerability which allows an attacker to change any user's password in the organization, this means that the user can also escalate achieve...9.8
  5. CVE-2022-31884Marval MSM v14.19.0.12476 has an Improper Access Control vulnerability which allows a low privilege user to delete other users API Keys including high privilege and the Administrator users API Keys.6.5
  6. CVE-2022-31883Marval MSM v14.19.0.12476 is has an Insecure Direct Object Reference (IDOR) vulnerability. A low privilege user is able to see other users API Keys including the Admins API Keys.8.8
  7. CVE-2022-31886Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending the user a malicious form.6.5
  8. CVE-2022-31885Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.9.8

The record

Peak rank
#141 in Jun 2022
Busiest month shown
Jun 2022, 5 CVEs
Months with a KEV entry
0 since Jun 2022
Monthly snapshots
1 since 2022
Marvalglobal's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store