Aquaforest Tiff Server — known CVE vulnerabilities

Every CVE whose affected-product data names Aquaforest Tiff Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2020-9324 — CVSS 7.5 (high): Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC.
• CVE-2020-9325 — CVSS 7.5 (high): Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.
• CVE-2020-9323 — CVSS 5.3 (medium): Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx.
• CVE-2023-6352 — CVSS 5.3 (medium): The default configuration of Aquaforest TIFF Server allows access to arbitrary file paths, subject to any restrictions imposed by Internet…