CLUSTERPRO X (EXPRESSCLUSTER X) vulnerabilities
5 known vulnerabilities in CLUSTERPRO X (EXPRESSCLUSTER X) from NEC. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
CLUSTERPRO X (EXPRESSCLUSTER X): Unrestricted Upload of File with Dangerous Type
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.
- 8.8 High severity
CLUSTERPRO X (EXPRESSCLUSTER X): Authentication Bypass by Capture-replay
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.
- 8.8 High severity
CLUSTERPRO X (EXPRESSCLUSTER X): Use of Password Hash Instead of Password for Authentication
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.
- 8.8 High severity
CLUSTERPRO X (EXPRESSCLUSTER X): Files or Directories Accessible to External Parties
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.
- 8.8 High severity
CLUSTERPRO X(EXPRESSCLUSTER X): Missing Authorization
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.