Advisories · Technology
ConnectWise ScreenConnect.
Every CVE that names ConnectWise ScreenConnect among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.9 CriticalCritical · KEV, CVSS 9+KEV
ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions
- ConnectWise ScreenConnect
- Privilege escalation
- Broken access control
- CVSS 4.7 Medium
ConnectWise ScreenConnect: In ScreenConnect™ versions prior to 26.2…
- ConnectWise ScreenConnect
- CWE-1284
- CVSS 9.0 CriticalCritical · CVSS 9+
ScreenConnect Instance Level Cryptographic Material Exposure
- ConnectWise ScreenConnect
- Weak cryptography or TLS
- CVSS 5.3 Medium
Certificate Signing Extension Returns Encrypted Values
- ConnectWise ScreenConnect
- Information disclosure
- CVSS 9.1 CriticalCritical · CVSS 9+
Improper server-side validation in ScreenConnect extension framework
- ConnectWise ScreenConnect
- CWE-494
- CVSS 8.1 HighCritical · KEVKEV
ScreenConnect Exposure to ASP.NET ViewState Code Injection
- ConnectWise ScreenConnect
- Insecure deserialization
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware
Authentication bypass using an alternate path or channel
- ConnectWise ScreenConnect
- Authentication bypass
- CVSS 8.4 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware
Improper limitation of a pathname to a restricted directory (“path traversal”)
- ConnectWise ScreenConnect
- Path traversal
- CVSS 5.3 Medium
ConnectWise - ScreenConnect Session Code Bypass
- ConnectWise ScreenConnect