foxman-un vulnerabilities

3 known vulnerabilities in foxman-un from Hitachienergy. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  FOXMAN-UN: Incorrect User Management

  CVE-2024-28020Jun 11, 2024Hitachi Energy

  A user/password reuse vulnerability exists in the FOXMAN-UN/UNEM application and server management. If exploited a malicious high-privileged user could use the passwords and login information through complex routines to extend access on the server and other se

• 9.8 Critical severity

  FOXMAN-UN: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-2012Jun 11, 2024Hitachi Energy

  vulnerability exists in the FOXMAN-UN/UNEM server / API Gateway that if exploited an attacker could use to allow unintended commands or code to be executed on the UNEM server allowing sensitive data to be read or modified or could cause other unintended behavi

• 7.4 High severity

  FOXMAN-UN: Improper Certificate Validation

  CVE-2024-28021Jun 11, 2024Hitachi Energy

  A vulnerability exists in the FOXMAN-UN/UNEM server that affects the message queueing mechanism’s certificate validation. If exploited an attacker could spoof a trusted entity causing a loss of confidentiality and integrity.