Multisuns vulnerabilities
We track 3 vulnerabilities in Multisuns products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2023.
Latest Multisuns vulnerabilities
- 9.8 Critical severity
EasyLog web+: Improper Control of Generation of Code
Multisuns EasyLog web+ has a code injection vulnerability. An unauthenticated remote attacker can exploit this vulnerability to inject code and access the system to perform arbitrary system operations or disrupt service.
- 7.5 High severity
EasyLog web+: Improper Limitation of a Pathname to a Restricted Directory
Multisuns EasyLog web+ has a path traversal vulnerability within its parameter in a specific URL. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files.
- 9.8 Critical severity
EasyLog web+: Use of Hard-coded Credentials
Multisuns EasyLog web+ has a vulnerability of using hard-coded credentials. An remote attacker can exploit this vulnerability to access the system to perform arbitrary system operations or disrupt service.