Sapphireims vulnerabilities

Products

• Sapphireims 11

Newest

• sapphireims In SapphireIMS 5.0, it is possible to take over an account by sending a request to the... CVE-2020-25566 9.8 CriticalAugust 11, 2021
• sapphireims In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire... CVE-2020-25565 9.8 CriticalAugust 11, 2021
• sapphireims In SapphireIMS 5.0, it is possible to create local administrator on any client with credentials... CVE-2020-25564 8.8 HighAugust 11, 2021
• sapphireims In SapphireIMS 5.0, it is possible to create local administrator on any client without requiring... CVE-2020-25563 9.8 CriticalAugust 11, 2021
• sapphireims In SapphireIMS 5.0, there is no CSRF token present in the entire application. This can lead to... CVE-2020-25562 6.5 MediumAugust 11, 2021
• sapphireims SapphireIMS 5 utilized default sapphire:ims credentials to connect the client to server. This... CVE-2020-25561 7.8 HighAugust 11, 2021
• sapphireims In SapphireIMS 5.0, it is possible to use the hardcoded credential in clients (username: sapphire... CVE-2020-25560 9.8 CriticalAugust 11, 2021
• sapphireims In SapphireIMS 4097_1, the password in the database is stored in Base64 format. CVE-2017-16632 7.5 HighAugust 11, 2021
• sapphireims In SapphireIMS 4097_1, a guest user is able to change the password of an administrative user by... CVE-2017-16631 6.5 MediumAugust 11, 2021
• sapphireims In SapphireIMS 4097_1, a guest user can create a local administrator account on any system that... CVE-2017-16630 8.8 HighAugust 11, 2021
• sapphireims In SapphireIMS 4097_1, it is possible to guess the registered/active usernames of the software... CVE-2017-16629 7.5 HighAugust 11, 2021