Microsec
First CVE: Jul 21, 2017Active for: 9 yearsTotal CVEs: 1
Microsec develops e-Szigno, a digital signature and document-authentication product, with its disclosed vulnerabilities centered on XML injection flaws in signature-validation parsing logic. Current exploitation activity and exposure counts are shown alongside this summary.
FAUCET AI Generated
1
Total CVEs
Bottom 1%
1.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 12% of tracked vendors
7.8
Avg CVSS Score
Higher Avg CVSS Score than 74% of tracked vendors
0.0%
In CISA KEV
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact products developed by Microsec over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 21, 2017
9 years ago
Most Recent CVE
Jul 21, 2017
3,291 days ago
Products(1 total)
Top CVEs
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-3931HIGH Microsec e-Szigno before 3.2.7.12 allows remote attackers to perform XML signature wrapping attacks via an e-akta signed document with a ds:Object node with a crafted payload prepe | Jul 21, 2017 | 7.8 | 25 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs that affect this vendor's products1 CVEs
100%
Severity distribution among all CVEs352,708 CVEs
45%
40%
11%
High
Attack Vector
Local1 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low1 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required1 (100.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (100.0%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this vendor scope (1 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID that affects a product developed by Microsec.
Media Mentions
Media articles that mention a CVE ID that affects a product developed by Microsec — matched by CVE ID, not by vendor name.