Vulnerabilities (CVE)

Filtered by vendor Cososys Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-13285 1 Cososys 1 Endpoint Protector 2024-02-28 5.0 MEDIUM 7.5 HIGH
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection.
CVE-2014-3932 1 Cososys 1 Endpoint Protector 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 4.3.0.4 and 4.4.0.2 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.
CVE-2012-2994 1 Cososys 1 Endpoint Protector Appliace 4 2024-02-28 7.5 HIGH N/A
The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force attack.