Bigantsoft Bigant Server — known CVE vulnerabilities

Every CVE whose affected-product data names Bigantsoft Bigant Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2025-0364 — CVSS 9.8 (critical): BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account…
• CVE-2022-23346 — CVSS 8.8 (high): BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.
• CVE-2022-23349 — CVSS 8.8 (high): BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).
• CVE-2022-23352 — CVSS 7.5 (high): An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).
• CVE-2022-23345 — CVSS 7.5 (high): BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.
• CVE-2022-26281 — CVSS 7.5 (high): BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.
• CVE-2022-23347 — CVSS 7.5 (high): BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.
• CVE-2022-23350 — CVSS 5.4 (medium): BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.
• CVE-2022-23348 — CVSS 5.3 (medium): BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.
• CVE-2009-4661 — CVSS 4.3 (medium): Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service…