Skip to content
OpenAdvisories

Vendor

iagona

4 known vulnerabilities.

Products

ScrutisWeb 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2023-33871

    Iagona ScrutisWeb Absolute Path Traversal

    Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an unauthenticated user to directly access any file outside the webroot.

    iagona ScrutisWeb
  • High 7.5
    CVE-2023-38257

    CVE-2023-38257

    Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that could allow an unauthenticated user to view profile information, including user login names and encrypted passwords.

    iagona ScrutisWeb