Search vulnerabilities

Results 2

Export CSV
CVE-2022-4779

authentication bypass in elvexys StreamX using StreamView HTML component with public web server feature

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication scheme. StreamX applications using StreamView HTML component with the public web server feature activated are affected.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2022-4778

path traversal in elvexys StreamX using StreamView HTML component with public web server feature

StreamX applications from versions 6.02.01 to 6.04.34 are affected by a path traversal vulnerability that allows authenticated users to get unauthorized access to files on the server's filesystem. StreamX applications using StreamView HTML component with the public web server feature activated are affected.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products