Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-37569

OS Command Injection Vulnerability in Emagic Data Center Management Suite

This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker could exploit this by injecting OS commands on the targeted system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code on targeted system.

CVSS 3.1 · 8.8 High EPSS 33.9% KEV · Not listed
Vendors
Esds.co
Products
Emagic Data Center Management
CVE-2023-37570

Insufficient Session Expiration Vulnerability in Emagic Data Center Management Suite

This vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. By reusing the stolen cookie, a remote attacker could gain unauthorized access to the targeted system.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Esds.co
Products
Emagic Data Center Management