ID
Product
IGSS Data Server(IGSSdataServer.exe)
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 5Medium 3Low 0
Watch
Add IGSS Data Server(IGSSdataServer.exe) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2329 | 9.8 | Feb 1 | A CWE-190: Integer Overflow or Wraparound vulnerability exists that could cause heap-based buffer overflow, leading to denial of service and potentially remote code execution when… Affected: All before V15.0.0.22073 |
| CVE-2022-24324 | 9.8 | Feb 1 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leading to remote code execution when an… Affected: All before V15.0.0.22073 |
| CVE-2022-32524 | 9.8 | Jan 30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an… Affected: All before V15.0.0.22170 |
| CVE-2022-32525 | 9.8 | Jan 30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an… Affected: All before V15.0.0.22170 |
| CVE-2022-32526 | 9.8 | Jan 30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an… Affected: All before V15.0.0.22170 |
| CVE-2022-32527 | 9.8 | Jan 30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an… Affected: All before V15.0.0.22170 |
| CVE-2022-32529 | 9.8 | Jan 30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an… Affected: All before V15.0.0.22170 |
| CVE-2022-32522 | 9.8 | Jan 30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an… Affected: All before V15.0.0.22170 |
| CVE-2022-32523 | 9.8 | Jan 30 | A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an… Affected: All before V15.0.0.22170 |
| CVE-2022-32528 | 9.1 | Jan 30 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause access to manipulate and read specific files in the IGSS project report directory,… Affected: All before V15.0.0.22170 |
| CVE-2023-27980 | 8.8 | Mar 21 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow the creation of a malicious report file in the IGSS… Affected: V through 16.0.0.23040 |
| CVE-2023-27982 | 8.8 | Mar 21 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause manipulation of dashboard files in the IGSS project report… Affected: V through 16.0.0.23040 |
| CVE-2023-27981 | 8.8 | Mar 21 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a… Affected: V through 16.0.0.23040 |
| CVE-2023-27984 | 8.8 | Mar 21 | A CWE-20: Improper Input Validation vulnerability exists in Custom Reports that could cause a macro to be executed, potentially leading to remote code execution when a user opens… Affected: V through 16.0.0.23040 |
| CVE-2023-27978 | 7.8 | Mar 21 | A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potentially leading to… Affected: V through 16.0.0.23040 |
| CVE-2023-27979 | 6.5 | Mar 21 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in the IGSS project report directory, this… Affected: V through 16.0.0.23040 |
| CVE-2023-27983 | 5.3 | Mar 21 | A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could allow deletion of reports from the IGSS project report… Affected: V through 16.0.0.23040 |
| CVE-2023-27977 | 5.3 | Mar 21 | A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause access to delete files in the IGSS project report directory,… Affected: V through 16.0.0.23040 |
Showing 18