Vx Search
Vendor:
First CVE: Oct 11, 2017 · Active for 8 years
7
Total CVEs
More Total CVEs than 83% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 73% of tracked products
6.8
Avg CVSS
Higher Avg CVSS than 39% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Vx Search over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 11, 2017
8 years ago
Most Recent CVE
May 24, 2024
791 days ago
CVE Severity & Scoring
Vx Search7 CVEs
71%
14%
14%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (28.6%)
Unknown0 (0.0%)
Required5 (71.4%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None7 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2017-15220CRITICAL Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to ex | Oct 11, 2017 | 9.8 | 46 | NO | YES |
CVE-2017-15662HIGH In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to contro | Jan 10, 2018 | 7.5 | 37 | NO | YES |
CVE-2023-49575MEDIUM A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, in Sync Breeze Enterprise Server 10.4.18 version, and in Disk Pulse Enterprise 10.4.18 versio | May 24, 2024 | 6.1 | 19 | NO | NO |
CVE-2023-49574MEDIUM A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14 that could allow an attacker to execute persistent XSS through /add_job in job_name. This vuln | May 24, 2024 | 6.1 | 19 | NO | NO |
CVE-2023-49573MEDIUM A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14 that could allow an attacker to execute persistent XSS through /add_command_action in action_v | May 24, 2024 | 6.1 | 19 | NO | NO |
CVE-2023-49572MEDIUM A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, and in Disk Pulse Enterprise 10.4.18 version, that could allow an attacker to execute persist | May 24, 2024 | 6.1 | 19 | NO | NO |
CVE-2018-10567MEDIUM XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7. | May 2, 2018 | 6.1 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
28.6% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Vx Search
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 10.2.14 | 4 | 6.1 | 0.3% | 0 | 0 |
| 10.1.12 | 2 | 8.7 | 8.1% | 0 | 2 |