Advantech Wise-paas/rmm — known CVE vulnerabilities

Every CVE whose affected-product data names Advantech Wise-paas/rmm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2019-13547 — CVSS 9.8 (critical): Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. There is an unsecured function that allows anyone who can access the IP address to use…
• CVE-2019-13551 — CVSS 9.8 (critical): Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a…
• CVE-2021-27437 — CVSS 9.1 (critical): The affected product allows attackers to obtain sensitive information from the WISE-PaaS dashboard. The system contains a hard-coded…
• CVE-2019-18227 — CVSS 7.5 (high): Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. XXE vulnerabilities exist that may allow disclosure of sensitive data.
• CVE-2019-18229 — CVSS 6.5 (medium): Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Lack of sanitization of user-supplied input cause SQL injection vulnerabilities. An…