Skip to content
OpenAdvisories

Vendor

TecCom

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.1

    XML External Entity Injection in TecConnect 4.1

    A blind XML External Entity (XXE) injection in the OpenMessaging webservice in TecCom TecConnect 4.1 allows an unauthenticated attacker to exfiltrate arbitrary files to an attacker-controlled server. TecConnect 4.1 is considered end-of-life as of December 202…