Dorsettcontrols Infoscan — known CVE vulnerabilities

Every CVE whose affected-product data names Dorsettcontrols Infoscan, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2024-39287 — CVSS 5.3 (medium): Dorsett Controls Central Server update server has potential information leaks with an unprotected file that contains passwords and API keys.
• CVE-2024-42408 — CVSS 5.3 (medium): The InfoScan client download page can be intercepted with a proxy, to expose filenames located on the system, which could lead to…
• CVE-2024-42493 — CVSS 5.3 (medium): Dorsett Controls InfoScan is vulnerable due to a leak of possible sensitive information through the response headers and the rendered…