connectwise control 19.3.25270.7185 vulnerabilities and exploits

(subscribe to this query)

5.3

CVSSv3

An issue exists in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enumeration vulnerability, allowing an unauthenticated malicious user to determine with certainty if an account exists for a given username.

Connectwise Control Connectwise Control 19.3.25270.7185

1 Github repository

4.8

CVSSv3

An issue exists in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is stored XSS in the Appearance modifier.

Connectwise Control 19.3.25270.7185

8.8

CVSSv3

An issue exists in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. CSRF can be used to send API requests.

Connectwise Control 19.3.25270.7185

7.2

CVSSv3

An issue exists in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. The server allows remote code execution. Administrative users could upload an unsigned extension ZIP file containing executable code that is subsequently executed by the server.

Connectwise Control 19.3.25270.7185

6.5

CVSSv3

An issue exists in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. Certain HTTP security headers are not used.

Connectwise Control 19.3.25270.7185

9.8

CVSSv3

An issue exists in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a CORS misconfiguration, which reflected the Origin provided by incoming requests. This allowed JavaScript running on any domain to interact with the server APIs and perform adminis...

Connectwise Control 19.3.25270.7185

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook