Easyvirt vulnerabilities
We track 6 vulnerabilities in Easyvirt products across 3 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on May 19, 2025.
Latest Easyvirt vulnerabilities
- 8.8 High severity
Dc Netscope: Improper Neutralization of Special Elements used in a Command
Multiple Code Injection vulnerabilities in EasyVirt DC NetScope <= 8.7.0 allows remote authenticated attackers to execute arbitrary code via the (1) lang parameter to /international/keyboard/options; the (2) keyboard_layout or (3) keyboard_variant parameter to
- 9.1 Critical severity
Co2scope: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to /api/auth/login.
- 9.8 Critical severity
Co2scope: Improper Neutralization of Special Elements used in a Command
Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/license/sendlicense/.
- 7.5 High severity
Co2scope: Use of Hard-coded Credentials
Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1) add an admin user via the /api/user/addalias route; (2) modifiy a user via the /api/user/updatealiasrou
- 9.8 Critical severity
Co2scope: Use of Hard-coded Credentials
Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as "somerandomaccesstoken". A weak HMAC secret poses a r
- 8.8 High severity
Co2scope: Improper Preservation of Permissions
Multiple incorrect access control issues in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1) add an admin user via the /api/user/addalias route; (2) modifiy a user via the /api/user/updatealias