TimePictra vulnerabilities
4 known vulnerabilities in TimePictra from Microchip. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.4 Critical severity
TimePictra: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting vulnerability in Microchip the TimePictra platform could allow an authenticated, low-privileged attacker to store malicious script content that executes when another user views the affected page
- 8.8 High severity
TimePictra: Use of Hard-coded Credentials
A hard-coded root password in Microchip TimePictra platform installation files could allow an attacker with access to those files to obtain privileged credentials
- 8.8 High severity
TimePictra: Unrestricted Upload of File with Dangerous Type
An unrestricted upload of files with dangerous type vulnerability in the Microchip TimePictra platform allows functionality not properly constrained by access control lists, potentially resulting in remote code execution.
- 7.5 High severity
TimePictra: Missing Authentication for Critical Functionality
Missing Authentication for Critical Function vulnerability in Microchip TimePictra allows Configuration/Environment Manipulation.This issue affects TimePictra: from 11.0 through 11.3 SP2.