Data Synchronizer
Vendor:
First CVE: Jun 9, 2011 · Active for 15 years
7
Total CVEs
More Total CVEs than 85% of tracked products
7.0
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
4.9
Avg CVSS
Higher Avg CVSS than 8% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Data Synchronizer over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 9, 2011
15 years ago
Most Recent CVE
Aug 9, 2011
5,466 days ago
CVE Severity & Scoring
Data Synchronizer7 CVEs
100%
All CVEs352,785 CVEs
45%
40%
11%
Medium
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown7 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown7 (100.0%)
User Interaction
None0 (0.0%)
Unknown7 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown7 (100.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-3014MEDIUM The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attacke | Aug 9, 2011 | 5.0 | 18 | NO | NO |
CVE-2011-2223MEDIUM The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 sends the Admin LDAP password in cleartext, which allows remote attackers to obtain sensitive i | Aug 9, 2011 | 5.0 | 18 | NO | NO |
CVE-2011-1711MEDIUM Unspecified vulnerability in the Mobility Pack 1.1.2 and earlier in Novell Data Synchronizer 1.0.x, and 1.1.x through 1.1.1 build 428, allows remote authenticated users to access t | Jun 9, 2011 | 5.5 | 18 | NO | NO |
CVE-2011-3013MEDIUM WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain acc | Aug 9, 2011 | 5.0 | 17 | NO | NO |
CVE-2011-2221MEDIUM The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to bypass WebAdmin authentication and obtain sensitive GroupWise inform | Aug 9, 2011 | 5.0 | 17 | NO | NO |
CVE-2011-2224MEDIUM The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote att | Aug 9, 2011 | 4.3 | 16 | NO | NO |
CVE-2011-2222MEDIUM Session fixation vulnerability in WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 allows remote attackers to hijack web sessions vi | Aug 9, 2011 | 4.3 | 16 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Data Synchronizer
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.1.2 | 6 | 4.8 | 1.2% | 0 | 0 |
| 1.1.1 | 7 | 4.9 | 1.3% | 0 | 0 |
| 1.1.0 | 7 | 4.9 | 1.3% | 0 | 0 |
| 1.0.0 | 7 | 4.9 | 1.3% | 0 | 0 |