Lansweeper الثغرات

النسخة

10.1.1.0	6
4.x	2
6.0.0.0	2
6.0.0.1	2
6.0.0.2	2

معالجة

Official Fix	8
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	10

قابلية الاستغلال

High	0
Functional	0
Proof-of-Concept	2
Unproven	0
Not Defined	16

متجه الوصول

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	16

توثيق

Not Defined	0
High	4
Low	4
None	10

تفاعل المستخدم

Not Defined	0
Required	4
None	14

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	6
≤8	0
≤9	10
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	0
≤7	6
≤8	6
≤9	4
≤10	0

VulDB

≤1	0
≤2	0
≤3	2
≤4	0
≤5	6
≤6	0
≤7	4
≤8	6
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	4
≤8	2
≤9	0
≤10	6

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	8

المجهز

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

إكسبلويت ذات هجوم فوري

<1k	4
<2k	10
<5k	4
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

إكسبلويت اليوم

<1k	18
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (55): 4.0, 6, 6.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.0.0.4, 6.0.0.5, 6.0.0.6, 6.0.0.7, 6.0.0.8, 6.0.0.9, 6.0.0.11, 6.0.0.12, 6.0.0.13, 6.0.0.14, 6.0.0.15, 6.0.0.16, 6.0.0.17, 6.0.0.18, 6.0.0.19, 6.0.0.21, 6.0.0.22, 6.0.0.23, 6.0.0.24, 6.0.0.25, 6.0.0.26, 6.0.0.27, 6.0.0.28, 6.0.0.29, 6.0.0.31, 6.0.0.32, 6.0.0.33, 6.0.0.34, 6.0.0.35, 6.0.0.36, 6.0.0.37, 6.0.0.38, 6.0.0.39, 6.0.0.41, 6.0.0.42, 6.0.0.43, 6.0.0.44, 6.0.0.45, 6.0.0.46, 6.0.0.47, 6.0.0.48, 6.0.100.75, 7.0, 7.1, 7.2, 7.2.105.2, 8.0.130.17, 9.1.20.2, 10.1.1

منشور	Base	Temp	الثغرة	0day	اليوم	ق�	معالجة	CTI	CVE
15/12/2022	6.5	6.4	Lansweeper HTTP Request SanitizeHtml تجاوز الصلاحيات	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-32763
15/12/2022	5.6	5.6	Lansweeper HTTP Request HdConfigActions.aspx altertextlanguages سكربتات مشتركة	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-28703
15/12/2022	8.1	7.9	Lansweeper HTTP Request AssetActions.aspx addDoc اجتياز الدليل	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-32573
15/12/2022	8.1	7.9	Lansweeper HTTP Request HelpdeskActions.aspx edittemplate اجتياز الدليل	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2022-29517
15/12/2022	6.1	6.1	Lansweeper HTTP Request KnowledgebasePageActions.aspx ImportArticles اجتياز الدليل	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-29511
15/12/2022	6.0	5.9	Lansweeper HTTP Request TicketTemplateActions.aspx اجتياز الدليل	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.02	CVE-2022-27498
15/04/2022	6.7	6.6	Lansweeper HTTP Request HelpdeskEmailActions.aspx حقن إس كيو إل	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2022-22149
15/04/2022	6.7	6.6	Lansweeper HTTP Request EchoAssets.aspx حقن إس كيو إل	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-21234
15/04/2022	5.4	5.4	Lansweeper HTTP Request AssetActions.aspx حقن إس كيو إل	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-21210
15/04/2022	5.7	5.7	Lansweeper HTTP Request WebUserActions.aspx سكربتات مشتركة	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-21145