Quartus Prime Pro and Standard edition software

CVEs (10)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-24481	Intel Quartus	Hig	0.51	7.8	0.00	Feb 17, 2021	Insecure inherited permissions for the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-33902	Intel Quartus Prime	Hig	0.47	7.3	0.00	Feb 16, 2023	Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-33892	Intel Quartus Prime	Hig	0.47	7.3	0.00	Feb 16, 2023	Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-26840	Intel Quartus Prime	Hig	0.47	7.3	0.00	Feb 16, 2023	Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-24016	Intel Quartus Prime	Med	0.44	6.7	0.00	Aug 11, 2023	Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-41693	Intel Quartus Prime	Med	0.44	6.7	0.00	May 10, 2023	Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-37329	Intel Quartus Prime	Med	0.44	6.7	0.00	Feb 16, 2023	Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro and Standard Edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-32570	Intel Quartus Prime	Med	0.44	6.7	0.00	Feb 16, 2023	Improper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-27233	Intel Quartus Prime	Med	0.42	6.5	0.01	Nov 11, 2022	XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2022-26888	Intel Quartus Prime	Low	0.18	2.8	0.00	Feb 16, 2023	Cross-site scripting in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable information disclosure via local access.

CVE-2020-24481HigFeb 17, 2021
Intel
Quartus
risk 0.51cvss 7.8epss 0.00
Insecure inherited permissions for the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-33902HigFeb 16, 2023
Intel
Quartus Prime
risk 0.47cvss 7.3epss 0.00
Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-33892HigFeb 16, 2023
Intel
Quartus Prime
risk 0.47cvss 7.3epss 0.00
Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-26840HigFeb 16, 2023
Intel
Quartus Prime
risk 0.47cvss 7.3epss 0.00
Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-24016MedAug 11, 2023
Intel
Quartus Prime
risk 0.44cvss 6.7epss 0.00
Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-41693MedMay 10, 2023
Intel
Quartus Prime
risk 0.44cvss 6.7epss 0.00
Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-37329MedFeb 16, 2023
Intel
Quartus Prime
risk 0.44cvss 6.7epss 0.00
Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro and Standard Edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-32570MedFeb 16, 2023
Intel
Quartus Prime
risk 0.44cvss 6.7epss 0.00
Improper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-27233MedNov 11, 2022
Intel
Quartus Prime
risk 0.42cvss 6.5epss 0.01
XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.
CVE-2022-26888LowFeb 16, 2023
Intel
Quartus Prime
risk 0.18cvss 2.8epss 0.00
Cross-site scripting in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable information disclosure via local access.