Whitebearsolutions Wbsairback — known CVE vulnerabilities

Every CVE whose affected-product data names Whitebearsolutions Wbsairback, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (16)

• CVE-2024-3781 — CVSS 9.1 (critical): Command injection vulnerability in the operating system. Improper neutralisation of special elements in Active Directory integration allows…
• CVE-2024-3782 — CVSS 8.8 (high): Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated HTML form to perform…
• CVE-2024-3783 — CVSS 7.7 (high): The Backup Agents section in WBSAirback 21.02.04 is affected by a Path Traversal vulnerability, allowing a user with low privileges to…
• CVE-2024-3784 — CVSS 6.6 (medium): Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through S3 Accounts…
• CVE-2024-3785 — CVSS 6.6 (medium): Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through Device NAS shared…
• CVE-2024-3786 — CVSS 6.6 (medium): Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through Device Synchronizations…
• CVE-2024-3787 — CVSS 6.6 (medium): Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through S3 disks…
• CVE-2024-3788 — CVSS 6.6 (medium): Vulnerability in WBSAirback 21.02.04, which involves improper neutralisation of Server-Side Includes (SSI), through License…
• CVE-2024-3789 — CVSS 6.5 (medium): Uncontrolled resource consumption vulnerability in White Bear Solutions WBSAirback, version 21.02.04. This vulnerability could allow an…
• CVE-2024-3790 — CVSS 4.8 (medium): Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/SystemUsers, login / description…
• CVE-2024-3791 — CVSS 4.8 (medium): Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/SystemConfiguration, name / free…
• CVE-2024-3792 — CVSS 4.8 (medium): Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/DeviceReplication, execution…
• CVE-2024-3793 — CVSS 4.8 (medium): Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/CloudAccounts, account name /…
• CVE-2024-3794 — CVSS 4.8 (medium): Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/AdvancedSystem, description…
• CVE-2024-3795 — CVSS 4.8 (medium): Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/BackupTemplate, name /…
• CVE-2024-3796 — CVSS 4.8 (medium): Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/BackupSchedule, description…