Easyvista vulnerabilities
We track 3 vulnerabilities in Easyvista products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 10, 2023.
3vulnerabilities
0critical
3high
0exploited
8.4average CVSS score
Latest Easyvista vulnerabilities
- 8.8 High severity
Service Manager: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. One parameter allows SQL injection. Version 2022.1.110.1.02 fixes the vulnerability.
- 7.5 High severity
Service Manager: Improper Restriction of Excessive Authentication Attempts
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Part of the application does not implement protection against brute-force attacks. Version 2022.1.133.0 corrects this issue.
- 8.8 High severity
Service Manager: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. Some parameters allow SQL injection. Version 2022.1.110.1.02 corrects this issue.