Advisories · Technology
nuxsmin sysPass.
Every CVE that names nuxsmin sysPass among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
sysPass 3.0.1 through 3.2.11 Unauthenticated Reinstallation RCE via install/install
- nuxsmin sysPass
- Authentication bypass
- CVSS 8.6 High
sysPass FileBackupService Authenticated OS Command Injection via Backup Path
- nuxsmin sysPass
- Command injection
- CVSS 8.6 High
sysPass 3.2.11 Authenticated OS Command Injection via Backup Path
- nuxsmin sysPass
- Command injection
- CVSS 7.1 High
sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption
- nuxsmin sysPass
- Broken access control
- CVSS 8.7 High
sysPass 3.2.11 Missing Object-Level Authorization via JSON-RPC API
- nuxsmin sysPass
- Broken access control
- CVSS 8.6 High
sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController
- nuxsmin sysPass
- Broken access control
- CVSS 3.5 Low
nuxsmin sysPass URL cross site scripting
- nuxsmin sysPass
- Cross-site scripting (XSS)