Skip to content
OpenAdvisories
Critical ICSA-16-133-01A 4 CVEs

Meteocontrol WEB'log Vulnerabilities (Update A)

Published Feb 13, 2016 · Updated Jun 5, 2025 · Revision 2

Vendor: Meteocontrol Product: WEB'log Basic 100 Product: WEB'log Light Product: WEB'log Pro Product: WEB'log Pro Unlimited

Vulnerabilities 4

  • Unscored —
    CVE-2016-2296 Public exploit EPSS 64%

    Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited does not require authentication for "post-admin" login pa…

  • Unscored —
    CVE-2016-2297

    Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to execute arbitrary commands via…

  • Unscored —
    CVE-2016-2298 Public exploit EPSS 25%

    Meteocontrol WEB'log Basic 100, Light, Pro, and Pro Unlimited allows remote attackers to obtain sensitive cleartext inf…

  • Unscored —
    CVE-2016-4504

    A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, P…

Revision history

  1. #2

    Advisory converted into a CSAF

  2. #1

    Initial Publication

References