An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It includes the username and password values in cleartext within each request's cookie value.
Search vulnerabilities
CVE-2020-11557
CVSS 3.1 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2020-11556
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There are multiple persistent (stored) and reflected XSS vulnerabilities.
CVSS 3.1 · 5.4 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2020-11555
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive credential information from backup files.
CVSS 3.1 · 7.5 High
EPSS 1.4%
KEV · Not listed
Vendors
Products
CVE-2020-11554
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. It allows remote attackers to obtain sensitive information via info.php4.
CVSS 3.1 · 7.5 High
EPSS 1.5%
KEV · Not listed
Vendors
Products
CVE-2020-11553
An issue was discovered in Castle Rock SNMPc Online 12.10.10 before 2020-01-28. There is pervasive CSRF.
CVSS 3.1 · 8.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.