Ipswitch Sårbarheter

Tidslinje

Typ

Produkt

Ipswitch IMail37
Ipswitch WS_FTP Server19
Ipswitch Whatsup Gold11
Ipswitch Ipswitch Collaboration Suite10
Ipswitch WhatsUp Professional8

Åtgärd

Official Fix94
Temporary Fix0
Workaround3
Unavailable5
Not Defined44

Utnyttjbarhet

High12
Functional1
Proof-of-Concept75
Unproven2
Not Defined56

Åtkomstvektor

Not Defined0
Physical0
Local12
Adjacent2
Network132

Autentisering

Not Defined0
High1
Low25
None120

Användarinteraktion

Not Defined0
Required21
None125

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤47
≤517
≤638
≤717
≤840
≤911
≤1016

CVSSv3 Temp

≤10
≤20
≤30
≤410
≤528
≤631
≤738
≤814
≤917
≤108

VulDB

≤10
≤20
≤30
≤47
≤518
≤638
≤716
≤849
≤92
≤1016

NVD

≤10
≤20
≤30
≤40
≤51
≤63
≤75
≤82
≤92
≤1010

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Säljare

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Utnyttja 0-dagars

<1k19
<2k43
<5k77
<10k0
<25k2
<50k4
<100k1
≥100k0

Utnyttja idag

<1k146
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Utnyttja marknadsvolymen

🔴 CTI Aktiviteter

Affected Products (28): Collaboration Suite (1), IMAIL (1), IMail (41), IMail Express (1), IMail Server (6), Imail (1), Instant Messaging (3), Ipswitch Collaboration Suite (10), MOVEit DMZ (4), MOVEit File Transfer (1), MOVEit Mobile (2), MOVEit Transfer (1), MoveIT (1), MoveIt (1), Server (1), WS FTP Server (10), WS_FTP (9), WS_FTP Home client (1), WS_FTP Pro (5), WS_FTP Server (19), WhatsUp (2), WhatsUp Gold (3), WhatsUp Professional (10), WhatsUp Small Business (1), Whatsup Gold (11), WinCOM LPD (1), Ws Ftp Home (1), switch (1)

Link to Vendor Website: https://www.ipswitch.com/

PubliceradBaseTempSårbarhetProdUtnRemEPSSCTICVE
11/05/20233.53.5Ipswitch MoveIT API cross site scriptingOkändNot DefinedNot Defined0.000740.00CVE-2023-30394
11/06/20198.27.8Ipswitch WS_FTP Server SSHServerAPI.dll kataloggenomgångFile Transfer SoftwareNot DefinedOfficial Fix0.000940.02CVE-2019-12146
11/06/20197.47.1Ipswitch WS_FTP Server SSHServerAPI.dll kataloggenomgångFile Transfer SoftwareNot DefinedOfficial Fix0.000940.00CVE-2019-12145
11/06/20198.58.2Ipswitch WS_FTP Server SSHServerAPI.dll kataloggenomgångFile Transfer SoftwareNot DefinedOfficial Fix0.005380.02CVE-2019-12144
11/06/20196.36.1Ipswitch WS_FTP Server SSHServerAPI.dll kataloggenomgångFile Transfer SoftwareNot DefinedOfficial Fix0.000960.00CVE-2019-12143
01/05/20188.58.2Ipswitch Whatsup Gold NmAPI.exe privilegier eskaleringNetwork Management SoftwareNot DefinedOfficial Fix0.001020.02CVE-2018-8939
01/05/20188.58.2Ipswitch Whatsup Gold SNMP MIB File DlgSelectMibFile.asp privilegier eskaleringNetwork Management SoftwareNot DefinedOfficial Fix0.000680.00CVE-2018-8938
02/02/20185.25.2Ipswitch MoveIt human.aspx Stored cross site scriptingOkändNot DefinedNot Defined0.001150.03CVE-2018-6545
24/01/20188.58.2Ipswitch Whatsup Gold Legacy ASP Page sql injektionNetwork Management SoftwareNot DefinedOfficial Fix0.000860.00CVE-2018-5778
24/01/20188.58.2Ipswitch Whatsup Gold TFTP Server privilegier eskaleringNetwork Management SoftwareNot DefinedOfficial Fix0.000900.04CVE-2018-5777
03/11/20176.86.1Ipswitch WS_FTP Pro Search minneskorruptionOkändProof-of-ConceptOfficial Fix0.003100.03CVE-2017-16513
03/10/20178.58.5Ipswitch IMail Server IMmailSrv minneskorruptionMail Server SoftwareNot DefinedNot Defined0.010750.00CVE-2017-12639
03/10/20178.58.5Ipswitch IMail Server IMmailSrv minneskorruptionMail Server SoftwareNot DefinedNot Defined0.010750.00CVE-2017-12638
18/05/20178.58.5Ipswitch MOVEit DMZ/MOVEit Transfer sql injektionOkändNot DefinedNot Defined0.001340.01CVE-2017-6195
06/10/20167.57.2Ipswitch Whatsup Gold WrFreeFormText.asp Blind sql injektionNetwork Management SoftwareNot DefinedOfficial Fix0.000510.02CVE-2016-1000000
06/10/20166.36.3Ipswitch Whatsup Gold WrFreeFormText.asp Blind sql injektionNetwork Management SoftwareNot DefinedNot Defined0.000000.02CVE-2016-10000
15/04/20165.45.4Ipswitch MOVEit File Transfer File View on Download cross site scriptingFile Transfer SoftwareNot DefinedNot Defined0.000690.00CVE-2015-7676
10/02/20165.35.2Ipswitch MOVEit DMZ SOAP Request machine.aspx User informationsgivningOkändNot DefinedOfficial Fix0.003350.00CVE-2015-7680
10/02/20166.15.9Ipswitch MOVEit Mobile cross site scriptingOkändNot DefinedOfficial Fix0.001420.04CVE-2015-7679
10/02/20168.88.8Ipswitch MOVEit Mobile förfalskning på begäran över webbplatsenOkändNot DefinedNot Defined0.001260.00CVE-2015-7678
10/02/20164.34.2Ipswitch MOVEit DMZ MOVEitSAPI Service MOVEitISAPI.dll informationsgivningOkändNot DefinedOfficial Fix0.000950.00CVE-2015-7677
10/02/20166.56.3Ipswitch MOVEit DMZ Send Attachment Feature informationsgivningOkändNot DefinedOfficial Fix0.001210.02CVE-2015-7675
08/01/20169.89.3Ipswitch Whatsup Gold SOAP Request DroneDeleteOldMeasurements sql injektionNetwork Management SoftwareProof-of-ConceptOfficial Fix0.000750.00CVE-2015-8261
27/12/20156.96.7Ipswitch Whatsup Gold cross site scriptingNetwork Management SoftwareProof-of-ConceptOfficial Fix0.001150.00CVE-2015-6005
27/12/20156.56.3Ipswitch Whatsup Gold WrFreeFormText.asp sql injektionNetwork Management SoftwareProof-of-ConceptOfficial Fix0.003060.00CVE-2015-6004

121 fler poster visas inte

Interested in the pricing of exploits?

See the underground prices here!