CyberMath vulnerabilities

4 known vulnerabilities in CyberMath from National Keep Cyber Security Services. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  CyberMath: Incorrect Authorization

  CVE-2024-7108Sep 26, 2024National Keep Cyber Security Services

  Incorrect Authorization vulnerability in National Keep Cyber Security Services CyberMath allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects CyberMath: before CYBM.240816253.

• 7.5 High severity

  CyberMath: Files or Directories Accessible to External Parties

  CVE-2024-7107Sep 26, 2024National Keep Cyber Security Services

  Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath allows Collect Data from Common Resource Locations. This issue affects CyberMath: before CYBM.240816253.

• 8.8 High severity

  CyberMath: Cross-Site Request Forgery

  CVE-2023-6676Feb 2, 2024National Keep Cyber Security Services

  Cross-Site Request Forgery (CSRF) vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery. This issue affects CyberMath: from v1.4 before v1.5.

• 9.8 Critical severity

  CyberMath: Unrestricted Upload of File with Dangerous Type

  CVE-2023-6675Feb 2, 2024National Keep Cyber Security Services

  Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server. This issue affects CyberMath: from v.1.4 before v.1.5.