Synametrics Synaman — known CVE vulnerabilities

Every CVE whose affected-product data names Synametrics Synaman, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2015-3140 — CVSS 8.8 (high): Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7…
• CVE-2018-10814 — CVSS 7.8 (high): Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.
• CVE-2022-26250 — CVSS 7.8 (high): Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges.
• CVE-2022-22828 — CVSS 7.5 (high): An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared…
• CVE-2022-26251 — CVSS 7.2 (high): The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate…
• CVE-2018-10763 — CVSS 4.8 (medium): Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading…