VYPR

syngo Dynamics

by Siemens Foundation

CVEs (7)

  • CVE-2022-42894HigNov 17, 2022
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Request Forgery (SSRF) vulnerability was identified in one of the web services exposed on the syngo Dynamics application that could allow for the leaking of NTLM…

  • CVE-2022-42893HigNov 17, 2022
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the…

  • CVE-2022-42891HigNov 17, 2022
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the…

  • CVE-2022-42734HigNov 17, 2022
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow to write data in any folder accessible to the account assigned to the…

  • CVE-2022-42733HigNov 17, 2022
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be retrieved from any folder accessible to the account assigned…

  • CVE-2022-42732HigNov 17, 2022
    risk 0.49cvss 7.5epss 0.01

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper read access control that could allow files to be retrieved from any folder accessible to the account assigned…

  • CVE-2022-42892MedNov 17, 2022
    risk 0.34cvss 5.3epss 0.01

    A vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). syngo Dynamics application server hosts a web service using an operation with improper write access control that could allow directory listing in any folder accessible to the account assigned to…