Crosschex Standard vulnerabilities
2 known vulnerabilities in Crosschex Standard from Anviz. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest first
- 8.1 High severity
Anviz CrossChex Standard: Improper Verification of Source of a Communication Channel
Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic.
- 7.5 High severity
Anviz CrossChex Standard: Selection of Less-Secure Algorithm During Negotiation
Anviz CrossChex Standard is vulnerable when an attacker manipulates the TDS7 PreLogin to disable encryption, causing database credentials to be sent in plaintext and enabling unauthorized database access.