Advisories · Technology

MB connect line mbCONNECT24.

Every CVE that names MB connect line mbCONNECT24 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-34575 CVE record

CVSS 7.5 High

Information Exposure in mymbCONNECT24, mbCONNECT24 <= 2.8.0
- MB connect line mymbCONNECT24
- MB connect line mbCONNECT24
- Information disclosure
Not analysed yet 2 Aug 2021
CVE-2021-34574 CVE record

CVSS 4.3 Medium

Password policy evasion in products of MB connect line and Helmholz
- MB connect line mymbCONNECT24
- MB connect line mbCONNECT24
- CWE-669
Not analysed yet 2 Aug 2021
CVE-2020-12530 CVE record

CVSS 4.3 Medium

Cross-site scripting in MB connect line mymbCONNECT24 and others
- MB connect line mymbCONNECT24
- MB connect line mbCONNECT24
- Cross-site scripting (XSS)
Not analysed yet 2 Mar 2021
CVE-2020-12529 CVE record

CVSS 5.8 Medium

Server-side request forgery in MB connect line mymbCONNECT24 and others
- MB connect line mymbCONNECT24
- MB connect line mbCONNECT24
- Server-side request forgery (SSRF)
Not analysed yet 2 Mar 2021
CVE-2020-12528 CVE record

CVSS 6.5 Medium

Improper privilege management in MB connect line mymbCONNECT24 and others
- MB connect line mymbCONNECT24
- MB connect line mbCONNECT24
- Privilege escalation
Not analysed yet 2 Mar 2021
CVE-2020-12527 CVE record

CVSS 6.5 Medium

Improper Access Validation in products of MB connect line and Helmholz
- MB connect line mymbCONNECT24
- MB connect line mbCONNECT24
- Privilege escalation
Not analysed yet 2 Mar 2021