Easyvirt develops a small suite of data-center management and network-scope products including CO2Scope, DCScope, and DC NetScope, which occupy a specialized but prominent niche in infrastructure management. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes and recur through characteristic input-handling and credential-management weakness classes including command injection, SQL injection, hard-coded credentials, cross-site scripting, and improper permission preservation—flaws typical of administrative and configuration interfaces that handle system commands and database access. Defenders should treat this vendor's disclosures as high-priority for any deployed instances; live severity, exploitation, and exposure figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Easyvirt over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-55062CRITICAL Code Injection vulnerability in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/license/sendlicense/. | Jan 31, 2025 | 9.8 | 25 | NO | NO |
CVE-2024-53356CRITICAL Weak JWT Secret vulnerabilitiy in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generat | Jan 31, 2025 | 9.8 | 25 | NO | NO |
CVE-2024-57587CRITICAL Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the (1) user | Jan 31, 2025 | 9.1 | 24 | NO | NO |
CVE-2024-55063HIGH Multiple Code Injection vulnerabilities in EasyVirt DC NetScope <= 8.7.0 allows remote authenticated attackers to execute arbitrary code via the (1) lang parameter to /internationa | May 19, 2025 | 8.8 | 23 | NO | NO |
CVE-2024-53355HIGH Multiple incorrect access control issues in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1) add an admin user via | Jan 31, 2025 | 8.8 | 23 | NO | NO |
CVE-2024-53357HIGH Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers, with low privileges, to (1) add an admin user via t | Jan 31, 2025 | 7.5 | 20 | NO | NO |
CVE-2024-53354MEDIUM Multiple SQL injection vulnerabilities in EasyVirt DCScope <= 8.6.0 and CO2Scope <= 1.3.0 allows remote authenticated attackers to execute arbitrary SQL commands via the (1) user p | Jan 31, 2025 | 6.5 | 18 | NO | NO |
CVE-2024-55064MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in EasyVirt DC NetScope <= 8.6.4 allow remote attackers to inject arbitrary JavaScript or HTML code via the (1) smtp_server, (2) | Mar 3, 2025 | 5.4 | 17 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Easyvirt.
Media articles that mention a CVE ID that affects a product developed by Easyvirt — matched by CVE ID, not by vendor name.