Vulnerability Name
Classifications
Severity
RegreSSHion Attack (CVE-2024-6387)
PCI v3.2-6.5.1, CAPEC-26, CWE-366, HIPAA-164.306(a), 164.308(a), ISO27001-A.14.2.5, OWASP 2013-A9, OWASP 2017-A9
Critical
Authentication Bypass in Fortra’s GoAnywhere MFT (CVE-2024-0204)
PCI v3.2-6.5.1, CAPEC-114,115, CWE-425, HIPAA-164.306(a), ISO27001-A.13.1.1, WASC-1, OWASP 2013-A9, OWASP 2017-A9, CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
High
Authentication Bypass in Ivanti Connect Secure and Policy Secure (CVE-2023-46805)
PCI v3.2-6.5.1, CAPEC-114,115, CWE-287, HIPAA-164.306(a), ISO27001-A.13.1.1, WASC-1, OWASP 2013-A9, OWASP 2017-A9, CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
High
Out-of-date Version (HSQLDB)
PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9
High
Out-of-date Version (Microsoft SQL Server)
PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9
High
Out-of-date Version (MySQL)
PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9
High
Out-of-date Version (Oracle)
PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9
High
Out-of-date Version (PostgreSQL)
PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9
High
Out-of-date Version (SQLite)
PCI v3.2-6.2, CAPEC-310, CWE-1035, 937, HIPAA-164.308(a)(1)(i), ISO27001-A.14.1.2, OWASP 2013-A9, OWASP 2017-A9
High
B.R.E.A.C.H. Attack Detected
CWE-310, OWASP 2013-A9, OWASP 2017-A9, CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Medium
BREACH Attack Detected
CWE-310, OWASP 2013-A9, OWASP 2017-A9, CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Medium
Prototype Pollution
PCI v3.2-6.5.7, CAPEC-180, CWE-1321, HIPAA-164.306(a), ISO27001-A.13.1.3, OWASP 2013-A9, OWASP 2017-A9
Low