Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Appspace

First CVE: Jan 7, 2020Active for: 7 yearsTotal CVEs: 6

Appspace develops a narrowly scoped digital signage and content-management platform with both cloud and on-premises deployment options that serves as a high-visibility display and communication layer in enterprise environments. Vulnerabilities affecting the vendor skew toward serious outcomes and frequently acquire public exploit code, concentrating in web-application and authentication weaknesses such as cross-site scripting, CSRF, improper authentication, and server-side request forgery that are endemic to internet-facing management interfaces. Current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
6
Total CVEs
More Total CVEs than 86% of tracked vendors
1.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 12% of tracked vendors
6.8
Avg CVSS Score
Higher Avg CVSS Score than 45% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Appspace over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 7, 2020
6 years ago
Most Recent CVE
Nov 12, 2024
621 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (6 CVEs).

6 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-27670CRITICAL
Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.
Feb 25, 20219.873NOYES
CVE-2021-27990HIGH
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus an
Apr 14, 20217.524NONO
CVE-2021-27704MEDIUM
Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page.
Nov 12, 20246.520NONO
CVE-2021-27564MEDIUM
A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Wh
Feb 22, 20215.419NONO
CVE-2021-27989MEDIUM
Appspace 6.2.4 is vulnerable to stored cross-site scripting (XSS) in multiple parameters within /medianet/sgcontentset.aspx.
Apr 14, 20215.418NONO
CVE-2020-5393MEDIUM
In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS.
Jan 7, 20206.117NONO
View all 6 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products6 CVEs
67%
17%
17%
Severity distribution among all CVEs352,713 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network6 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (33.3%)
Unknown0 (0.0%)
Required4 (66.7%)
Privileges Required
Low2 (33.3%)
High0 (0.0%)
None4 (66.7%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (6 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
16.7% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Appspace.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Appspace — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Appspace's Products

View all 1 CNAs →

Top CWEs