Adas
Vendor:
First CVE: Sep 20, 2019 · Active for 6 years
11
Total CVEs
More Total CVEs than 89% of tracked products
11.0
Avg CVEs / Year
Higher CVE frequency than 96% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 43% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Adas over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 20, 2019
6 years ago
Most Recent CVE
Sep 20, 2019
2,499 days ago
CVE Severity & Scoring
Adas11 CVEs
55%
27%
18%
All CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network11 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low11 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None5 (45.5%)
Unknown0 (0.0%)
Required6 (54.5%)
Privileges Required
Low2 (18.2%)
High1 (9.1%)
None8 (72.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2019-15088CRITICAL An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentica | Sep 20, 2019 | 9.8 | 29 | NO | NO |
CVE-2019-15089HIGH An issue was discovered in PRiSE adAS 1.7.0. Forms have no CSRF protection, letting an attacker execute actions as the administrator. | Sep 20, 2019 | 8.8 | 27 | NO | NO |
CVE-2019-14914CRITICAL An issue was discovered in PRiSE adAS 1.7.0. The path is not properly escaped in the medatadata_del method, leading to an arbitrary file read and deletion via Directory Traversal. | Sep 20, 2019 | 9.1 | 26 | NO | NO |
CVE-2019-15087HIGH An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution. | Sep 20, 2019 | 7.2 | 24 | NO | NO |
CVE-2019-15085HIGH An issue was discovered in PRiSE adAS 1.7.0. The current database password is embedded in the change password form. | Sep 20, 2019 | 7.5 | 22 | NO | NO |
CVE-2019-14916MEDIUM An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload. | Sep 20, 2019 | 6.5 | 21 | NO | NO |
CVE-2019-15086MEDIUM An issue was discovered in PRiSE adAS 1.7.0. The newentityID parameter is not properly escaped, leading to a reflected XSS in the error message. | Sep 20, 2019 | 6.1 | 20 | NO | NO |
CVE-2019-14915MEDIUM An issue was discovered in PRiSE adAS 1.7.0. Certificate data are not properly escaped. This leads to XSS when submitting a rogue certificate. | Sep 20, 2019 | 6.1 | 20 | NO | NO |
CVE-2019-14911MEDIUM An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly escape output on error, leading to reflected XSS. | Sep 20, 2019 | 6.1 | 20 | NO | NO |
CVE-2019-14912MEDIUM An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly check the goto parameter, leading to an open redirect that leaks the session cookie. | Sep 20, 2019 | 6.1 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Adas
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.7.0 | 11 | 7.2 | 1.3% | 0 | 0 |