Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Tenefit Subscribe
Filtered by product Kaazing Websocket Gateway
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-6309 1 Tenefit 1 Kaazing Websocket Gateway 2021-04-21 5.0 MEDIUM 7.5 HIGH
The HTTP and WebSocket engine components in the server in Kaazing Gateway 4.0.2, 4.0.3, and 4.0.4 and Gateway - JMS Edition 4.0.2, 4.0.3, and 4.0.4 allow remote attackers to obtain sensitive information via vectors related to HTTP request handling.
CVE-2017-6910 2 Kaazing, Tenefit 2 Kaazing Gateway, Kaazing Websocket Gateway 2021-04-19 5.0 MEDIUM 7.5 HIGH
The HTTP and WebSocket engine components in the server in Kaazing Gateway before 4.5.3 hotfix-1, Gateway - JMS Edition before 4.0.5 hotfix-15, 4.0.6 before hotfix-4, 4.0.7, 4.0.9 before hotfix-19, 4.4.x before 4.4.2 hotfix-1, 4.5.x before 4.5.3 hotfix-1, and Gateway Community and Enterprise Editions before 5.6.0 allow remote attackers to bypass intended access restrictions and obtain sensitive information via vectors related to HTTP request handling.