Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Eginnovations Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-29594 2 Eginnovations, Microsoft 5 Eg Agent, Eg Manager, Eg Rum Collectors and 2 more 2022-06-13 7.2 HIGH 7.8 HIGH
eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.
CVE-2020-8591 1 Eginnovations 1 Eg Manager 2020-02-06 7.5 HIGH 9.8 CRITICAL
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request.
CVE-2020-8592 1 Eginnovations 1 Eg Manager 2020-02-05 7.5 HIGH 9.8 CRITICAL
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feature).