Withsecure

F-secure Policy Manager

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-43762

  • EPSS 2.28%
  • Published 22.09.2023 05:15:09
  • Last modified 21.11.2024 08:24:44

Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Manager Proxy 15.

6.1

CVE-2023-43763

  • EPSS 0.44%
  • Published 22.09.2023 05:15:09
  • Last modified 21.11.2024 08:24:44

Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux.

9.8

CVE-2022-38165

  • EPSS 0.56%
  • Published 17.11.2022 23:15:18
  • Last modified 30.04.2025 15:15:54

Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in arbitrary locations on the F-Secure Policy Manager Server.

6.1

CVE-2022-38162

  • EPSS 0.18%
  • Published 25.10.2022 19:15:11
  • Last modified 07.05.2025 21:15:55

Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10) exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input.