Opswat Metadefender — known CVE vulnerabilities

Every CVE whose affected-product data names Opswat Metadefender, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-32272 — CVSS 9.8 (critical): OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect…
• CVE-2018-16275 — CVSS 7.8 (high): OPSWAT MetaDefender before v4.11.2 allows CSV injection.
• CVE-2022-40778 — CVSS 5.4 (medium): A stored Cross-Site Scripting (XSS) vulnerability in OPSWAT MetaDefender ICAP Server before 4.13.0 allows attackers to execute arbitrary…
• CVE-2022-32273 — CVSS 4.3 (medium): As a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated…