Spaceapplications Yamcs — known CVE vulnerabilities

Every CVE whose affected-product data names Spaceapplications Yamcs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-45278 — CVSS 9.1 (critical): Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via…
• CVE-2023-45277 — CVSS 7.5 (high): Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows…
• CVE-2023-45281 — CVSS 6.1 (medium): An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file.
• CVE-2023-45279 — CVSS 5.4 (medium): Yamcs 5.8.6 allows XSS (issue 1 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file…
• CVE-2023-45280 — CVSS 5.4 (medium): Yamcs 5.8.6 allows XSS (issue 2 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file…