Login Request a demo
AO
Product
Axis OS 2020
by Axis · last CVE Jun 18, 2024
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 6Medium 2Low 0
Severity
All severities8Critical0High6Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Axis OS 2020 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-5800
8.8
1%
Feb 5
Insufficient input validation in VAPIX API create_overlay.cgi
Affected: before 9.80.55
CVE-2021-31988
8.8
1%
Oct 5
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to add the Carriage Return and Line Feed (CRLF) control characters and…
Affected: before 9.80.3.5
CVE-2023-21415
8.1
1%
Oct 16
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion
Affected: before 9.80.47
CVE-2021-31987
7.5
1%
Oct 5
A user controlled parameter related to SMTP test functionality is not correctly validated making it possible to bypass blocked network recipients
Affected: before 9.80.3.5
CVE-2023-21418
7.1
1%
Nov 21
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion
Affected: before 9.80.49
CVE-2023-21417
7.1
1%
Nov 21
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder…
Affected: before 9.80.49
CVE-2021-31986
6.8
1%
Oct 5
User controlled parameters related to SMTP notifications are not correctly validated
Affected: before 9.80.3.5
CVE-2024-0066
5.3
0%
Jun 18
Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose sensitive traffic between the client (Axis device) and (O3C) server
Affected: before 9.80.69
Showing 8