Vulnerabilities (CVE)

Filtered by vendor Ge Subscribe
Filtered by product Intelligent Platforms Proficy Real-time Information Portal
Total 6 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-0652 1 Ge 1 Intelligent Platforms Proficy Real-time Information Portal 2024-11-21 5.0 MEDIUM N/A
GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call.
CVE-2013-0651 1 Ge 1 Intelligent Platforms Proficy Real-time Information Portal 2024-11-21 5.0 MEDIUM N/A
The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.
CVE-2012-3026 1 Ge 1 Intelligent Platforms Proficy Real-time Information Portal 2024-11-21 10.0 HIGH N/A
rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3021.
CVE-2012-3021 1 Ge 1 Intelligent Platforms Proficy Real-time Information Portal 2024-11-21 10.0 HIGH N/A
rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3010 and CVE-2012-3026.
CVE-2012-3010 1 Ge 1 Intelligent Platforms Proficy Real-time Information Portal 2024-11-21 10.0 HIGH N/A
rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6 through 3.5 SP1 allows remote attackers to cause a denial of service (memory corruption and service crash) or possibly execute arbitrary code via long input data, a different vulnerability than CVE-2012-3021 and CVE-2012-3026.
CVE-2012-0232 1 Ge 1 Intelligent Platforms Proficy Real-time Information Portal 2024-11-21 6.4 MEDIUM N/A
Directory traversal vulnerability in rifsrvd.exe in the Remote Interface Service in GE Intelligent Platforms Proficy Real-Time Information Portal 2.6, 3.0, 3.0 SP1, and 3.5 allows remote attackers to modify the configuration via crafted strings.