Login Request a demo
VH
Product
V2i Hub
by Battelle · last CVE Dec 28, 2018
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 5High 2Medium 1Low 0
Severity
All severities8Critical5High2Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add V2i Hub to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1000631
9.8
2%
Dec 28
Battelle V2I Hub 3.0 is vulnerable to SQL injection
Affected: 3.0
CVE-2018-1000628
9.8
3%
Dec 28
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET…
Affected: 2.5.1
CVE-2018-1000627
9.8
2%
Dec 28
Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API key file
Affected: 2.5.1
CVE-2018-1000626
9.8
3%
Dec 28
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the default API key
Affected: 2.5.1
CVE-2018-1000625
9.8
2%
Dec 28
Battelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account
Affected: 2.5.1
CVE-2018-1000624
7.5
2%
Dec 28
Battelle V2I Hub 2.5.1 is vulnerable to a denial of service, caused by the failure to restrict access to a sensitive functionality
Affected: 2.5.1
CVE-2018-1000630
7.2
2%
Dec 28
Battelle V2I Hub 2.5.1 is vulnerable to SQL injection
Affected: 2.5.1
CVE-2018-1000629
6.1
1%
Dec 28
Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by api/SystemConfigActions.php?action=add and the index.php…
Affected: 2.5.1
Showing 8