Advisories · Technology
arcinfo PcVue.
Every CVE that names arcinfo PcVue among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.4 High
Weak encryption mechanism for User directory
- arcinfo PcVue
- Weak cryptography or TLS
- CVSS 6.8 Medium
Insecure password storage in User directory
- arcinfo PcVue
- CWE-256
- CVSS 5.3 Medium
HTTP Host header vulnerability in WebClient and WebScheduler web apps
- arcinfo PcVue
- CWE-644
- CVSS 5.3 Medium
Use of unsecure cookies for GraphicalData web service and WebClient web app
- arcinfo PcVue
- CWE-614
- CWE-1275
- CVSS 2.3 Low
Missing security HTTP headers
- arcinfo PcVue
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
XSS vulnerability upon unsuccessful authentication
- arcinfo PcVue
- Cross-site scripting (XSS)
- CVSS 2.3 Low
Server configuration details in HTTP headers
- arcinfo PcVue
- Information disclosure
- CVSS 5.3 Medium
Use of vulnerable Resource Owner Password Credentials flow
- arcinfo PcVue
- Authentication bypass
- CWE-477
- CVSS 5.3 Medium
Missing origin validation in GraphicalData web service requests
- arcinfo PcVue
- CWE-1385
- CVSS 7.6 High
Improper validation of payload elements
- arcinfo PcVue
- CWE-940
- CWE-1288
- CVSS 6.0 Medium
Improper validation of packets sequencing
- arcinfo PcVue
- CWE-754
- CVSS 6.0 Medium
Certificate validity not properly verified
- arcinfo PcVue
- CWE-298
- CVSS 1.8 Low
User credentials recorded in log files
- arcinfo PcVue
- Information disclosure
- CVSS 2.3 Low
Client Secret not checked with OAuth Password grant type
- arcinfo PcVue
- CWE-358