Parlano Mindalign — known CVE vulnerabilities

Every CVE whose affected-product data names Parlano Mindalign, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2005-2593 — CVSS 10.0 (critical): Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors.
• CVE-2005-2592 — CVSS 7.5 (high): Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to bypass authentication via unknown vectors.
• CVE-2005-2591 — CVSS 5.0 (medium): Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the "User Enumeration"…
• CVE-2005-2590 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject arbitrary web script…