WS
Product
Workplace Suite
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 2Low 0
Watch
Add Workplace Suite to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-55930 | 9.8 | Jan 23 | Weak default folder permissions Affected: before 5.6.701.9 |
| CVE-2024-55926 | 9.8 | Jan 23 | Arbitrary file upload, deletion and read through header manipulation Affected: before 5.6.701.9 |
| CVE-2024-55928 | 7.5 | Jan 23 | Clear text secrets returned & Remote system secrets in clear text Affected: before 5.6.701.9 |
| CVE-2024-55927 | 7.5 | Jan 23 | Flawed token generation implementation & Hard-coded key implementation Affected: before 5.6.701.9 |
| CVE-2024-55925 | 7.5 | Jan 23 | API Security bypass through header manipulation Affected: before 5.6.701.9 |
| CVE-2024-55931 | 6.5 | Jan 27 | Token stored in session storage Affected: before 5.6.701.9 |
| CVE-2024-55929 | 5.3 | Jan 23 | Mail spoofing Affected: before 5.6.701.9 |
Showing 7