Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Sofaware Subscribe
Filtered by product Safe At Office 500 Utm
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-3462 1 Sofaware 1 Safe At Office 500 Utm 2018-10-16 6.0 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, allows remote attackers to execute commands as arbitrary users, and disable firewalling of the protected network.
CVE-2007-3464 1 Sofaware 1 Safe At Office 500 Utm 2018-10-16 8.5 HIGH N/A
Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, does not require entry of the old password when changing the admin password, which might allow attackers to gain privileges by conducting a CSRF attack, making a password change on an unattended workstation, or other vectors.
CVE-2007-3465 1 Sofaware 1 Safe At Office 500 Utm 2018-10-16 10.0 HIGH N/A
Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password.