FileWave vulnerabilities
We track 2 vulnerabilities in FileWave products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 25, 2022.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest FileWave vulnerabilities
- 9.8 Critical severity
Filewave: Use of Hard-coded Credentials
An authentication bypass vulnerability exists in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to gain access to the system with the highest authority possible and gain full control over the FileWave platfor
- 7.5 High severity
Filewave: Use of Hard-coded Credentials
A hard-coded cryptographic key is used in FileWave before 14.6.3 and 14.7.x before 14.7.2. Exploitation could allow an unauthenticated actor to decrypt sensitive information saved in FileWave, and even send crafted requests.