Loway Queuemetrics — known CVE vulnerabilities

Every CVE whose affected-product data names Loway Queuemetrics, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2020-13127 — CVSS 8.8 (high): A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary…
• CVE-2020-15925 — CVSS 8.8 (high): A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary…
• CVE-2020-15947 — CVSS 8.8 (high): A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote…
• CVE-2024-42341 — CVSS 6.1 (medium): Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
• CVE-2024-42343 — CVSS 5.3 (medium): Loway - CWE-204: Observable Response Discrepancy
• CVE-2024-42342 — CVSS 4.3 (medium): Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')