Iagona Scrutisweb — known CVE vulnerabilities

Every CVE whose affected-product data names Iagona Scrutisweb, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-35189 — CVSS 10.0 (critical): Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a remote code execution vulnerability that could allow an unauthenticated…
• CVE-2023-33871 — CVSS 7.5 (high): Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a directory traversal vulnerability that could allow an unauthenticated user…
• CVE-2023-38257 — CVSS 7.5 (high): Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to an insecure direct object reference vulnerability that could allow an…
• CVE-2023-35763 — CVSS 5.5 (medium): Iagona ScrutisWeb versions 2.1.37 and prior are vulnerable to a cryptographic vulnerability that could allow an unauthenticated user to…