Advisories · Technology
vtenext.
Every CVE that names vtenext among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php
- vtenext
- CWE-620
- CVSS 8.6 High
vtenext before 25.02.2 SQL Injection via fieldname in Fax EditView
- vtenext
- SQL injection
- CVSS 5.9 Medium
vtenext before 25.02.2 Session Identifier Disclosure via Touch Web Service
- vtenext
- Information disclosure
- CVSS 6.9 Medium
vtenext before 25.02.2 CSRF Protection Bypass via HTTP Method Tampering
- vtenext
- Cross-site request forgery (CSRF)
- CVSS 5.1 Medium
vtenext before 25.02.2 Reflected XSS via widgetInfoList in HomeWidgetBlockList
- vtenext
- Cross-site scripting (XSS)