Ipswitch

Moveit Mobile

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2015-7679

Exploit
  • EPSS 0.01%
  • Published 10.02.2016 15:59:03
  • Last modified 12.04.2025 10:46:40

Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/.

8.8

CVE-2015-7678

  • EPSS 0.01%
  • Published 10.02.2016 15:59:02
  • Last modified 12.04.2025 10:46:40

Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.

6.5

CVE-2015-7675

Exploit
  • EPSS 0.01%
  • Published 10.02.2016 15:59:00
  • Last modified 12.04.2025 10:46:40

The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileIds parameter to mobile/sendMsg...