Medium severity vulnerabilities

201 CVEs scored 4.0 to 6.9 on CVSS. Medium-severity vulnerabilities have limited impact or are harder to exploit. They still matter when chained with other flaws.

• 6.5 Medium severity

  Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Exploited

  CVE-2019-8394Feb 17, 2019ZohoEPSS 63.3%

  Zoho ManageEngine ServiceDesk Plus (SDP) before 10.0 build 10012 allows remote attackers to upload arbitrary files via login page customization.

• 4.3 Medium severity

  Fortinet FortiOS and FortiADC Improper Access Control Exploited

  CVE-2018-13374Jan 22, 2019FortinetEPSS 38.1%

  A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a

• 5.9 Medium severity

  Cisco IOS Software Denial-of-Service Exploited

  CVE-2018-0180Mar 28, 2018Cisco IOSEPSS 4.93%

  Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities af

• 5.9 Medium severity

  Cisco IOS Software Denial-of-Service Exploited

  CVE-2018-0179Mar 28, 2018Cisco IOSEPSS 4.93%

  Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities af

• 6.3 Medium severity

  Cisco IOS Software Resource Management Errors Exploited

  CVE-2018-0161Mar 28, 2018Cisco IOSEPSS 4.12%

  A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Obje

• 6.1 Medium severity

  Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Exploited

  CVE-2018-6882Mar 27, 2018SynacorEPSS 29.8%

  Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7 might allow remote attackers to inject arbitrary web script or HTML via a Content-Locatio

• 5.9 Medium severity

  Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Exploited

  CVE-2017-12319Mar 27, 2018Cisco IOS XEEPSS 5.24%

  A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial of service (DoS) condition, or p

• 6.6 Medium severity

  SAP Customer Relationship Management (CRM) Path Traversal Exploited

  CVE-2018-2380Mar 1, 2018SAPEPSS 28.9%

  SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.

• 6.5 Medium severity

  Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Exploited

  CVE-2017-12238Sep 29, 2017Cisco IOSEPSS 2.02%

  A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a C6800-16P10G or C6800-16P10G-XL type line card to crash, resultin

• 6.5 Medium severity

  Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Exploited

  CVE-2017-12232Sep 29, 2017Cisco IOSEPSS 2.15%

  A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a d

• 6.5 Medium severity

  Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Exploited

  CVE-2017-6663Aug 7, 2017Cisco IOS and IOS XEEPSS 2.12%

  A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic nodes of an affected system to reload, resulting in a denial of service (DoS) condition. Mo

• 4.3 Medium severity

  Microsoft Internet Explorer Information Disclosure Exploited

  CVE-2017-0059Mar 17, 2017MicrosoftEPSS 62%

  Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Information Disclosure Vulnerability." This vulnerability is different from those described in CV

• 6.5 Medium severity

  Microsoft XML Core Services Information Disclosure Exploited

  CVE-2017-0022Mar 17, 2017MicrosoftEPSS 18.1%

  Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in me

• 6.5 Medium severity

  SAP NetWeaver XML External Entity (XXE) Exploited

  CVE-2016-9563Nov 23, 2016SAPEPSS 24.2%

  BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI, aka SAP Security Note 2296909.

• 6.5 Medium severity

  Microsoft Internet Explorer Messaging API Information Disclosure Exploited

  CVE-2016-3298Oct 14, 2016MicrosoftEPSS 33.3%

  Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explo

• 6.5 Medium severity

  Microsoft Internet Explorer and Edge Information Disclosure Exploited

  CVE-2016-3351Sep 14, 2016MicrosoftEPSS 26.5%

  Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

• 5.5 Medium severity

  Apple iOS Information Disclosure Exploited

  CVE-2016-4655Aug 25, 2016AppleEPSS 33.4%

  The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.

• 5.5 Medium severity

  ImageMagick Server-Side Request Forgery (SSRF) Exploited

  CVE-2016-3718May 5, 2016Red HatEPSS 75.6%

  The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.

• 5.5 Medium severity

  ImageMagick Arbitrary File Deletion Exploited

  CVE-2016-3715May 5, 2016Red HatEPSS 75.3%

  The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.

• 4.3 Medium severity

  Microsoft Internet Explorer Information Disclosure Exploited

  CVE-2016-0162Apr 12, 2016MicrosoftEPSS 21.9%

  Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of files via crafted JavaScript code, aka "Internet Explorer Information Disclosure Vulnerability."

• 5.3 Medium severity

  SAP NetWeaver Information Disclosure Exploited

  CVE-2016-2388Feb 16, 2016SAPEPSS 52.2%

  The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to obtain sensitive user information via a crafted HTTP request, aka SAP Security Note 2256846.

• 5.0 Medium severity

  Jenkins User Interface (UI) Information Disclosure Exploited

  CVE-2015-5317Nov 25, 2015JenkinsEPSS 23%

  The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

• 5.0 Medium severity

  Oracle Java SE Integrity Check Exploited

  CVE-2015-4902Oct 22, 2015OracleEPSS 13.6%

  Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

• 6.9 Medium severity

  Microsoft Win32k Memory Corruption Exploited

  CVE-2015-2546Sep 9, 2015MicrosoftEPSS 10.1%

  The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted appli

• 6.5 Medium severity

  Microsoft Internet Explorer ASLR Bypass Exploited

  CVE-2015-0071Feb 11, 2015MicrosoftEPSS 33.6%

  Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."

• 6.9 Medium severity

  Linux Kernel Race Condition Exploited

  CVE-2014-0196May 7, 2014LinuxEPSS 20.3%

  The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privi

• 6.1 Medium severity

  Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Exploited

  CVE-2014-2120Mar 19, 2014CiscoEPSS 22.6%

  Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.

• 4.3 Medium severity

  Microsoft Internet Explorer Information Disclosure Exploited

  CVE-2013-7331Feb 26, 2014MicrosoftEPSS 50.2%

  The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a r

• 5.4 Medium severity

  D-Link DSL-2760U Gateway Cross-Site Scripting Exploited

  CVE-2013-5223Nov 19, 2013D-LinkEPSS 50.8%

  Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated users to inject arbitrary web script or HTML via the (1) ntpServer1 parameter to sntpcfg.cgi, username parameter to (2) ddnsmngr.cmd or (3) tod

• 5.5 Medium severity

  Microsoft Silverlight Information Disclosure Exploited

  CVE-2013-3896Oct 9, 2013MicrosoftEPSS 67.1%

  Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive information via a crafted Silverlight application, aka "Silverlight Vulnerability."

• 6.5 Medium severity

  Mozilla Firefox Information Disclosure Exploited

  CVE-2013-1675May 16, 2013MozillaEPSS 6.7%

  Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, whic

• 4.3 Medium severity

  Oracle JRE Unspecified Exploited

  CVE-2013-2423Apr 17, 2013OracleEPSS 85.2%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the A

• 5.0 Medium severity

  Oracle JRE Sandbox Bypass Exploited

  CVE-2013-0431Jan 31, 2013OracleEPSS 90.1%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a

• 4.7 Medium severity

  Oracle Fusion Middleware Unspecified Exploited

  CVE-2012-0518Oct 16, 2012OracleEPSS 4.69%

  Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via unknown vectors related to Redirects, a different vulnerability than CVE-2012-3175.

• 6.9 Medium severity

  Microsoft Visual Basic for Applications Insecure Library Loading Exploited

  CVE-2012-1854Jul 10, 2012MicrosoftEPSS 20.9%

  Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges v

• 6.1 Medium severity

  Adobe Flash Player Cross-Site Scripting (XSS) Exploited

  CVE-2012-0767Feb 16, 2012AdobeEPSS 6.19%

  Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows remote attackers to in

• 6.8 Medium severity

  D-Link DIR-300 Router Cleartext Storage of a Password Exploited

  CVE-2011-4723Dec 20, 2011D-LinkEPSS 3.06%

  The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.

• 5.3 Medium severity

  Red Hat JBoss Authentication Bypass Exploited

  CVE-2010-0738Apr 28, 2010Red HatEPSS 73.8%

  The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to sen

• 6.5 Medium severity

  Adobe BlazeDS Information Disclosure Exploited

  CVE-2009-3960Feb 15, 2010AdobeEPSS 90.1%

  Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1, and ColdFusion 7.0.2, 8.0, 8.0.1, and 9.0, allows remote attackers to obtain sensitive in

• 4.3 Medium severity

  Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Exploited

  CVE-2009-2055Aug 19, 2009CiscoEPSS 3.31%

  Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.