Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2022-2140

Elcomplus SmartICS Cross-site Scripting

Elcomplus SmartICS v2.3.4.0 does not neutralize user-controllable input, which allows an authenticated user to inject arbitrary code into specific parameters.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Smartics
Products
Smartics
CVE-2022-2088

Elcomplus SmartICS Access Control

An authenticated user with admin privileges may be able to terminate any process on the system running Elcomplus SmartICS v2.3.4.0.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Smartics
Products
Smartics
CVE-2022-2106

Elcomplus SmartICS Path Traversal

Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attacks and specify arbitrary files.

CVSS 3.1 · 3.8 Low EPSS < 1% KEV · Not listed
Vendors
Smartics
Products
Smartics