Server
by Traccar
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-7746 | Cri | 0.64 | 9.8 | 0.01 | Aug 13, 2024 | Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by the Traccar solution that should otherwise be protected by the authentication… | ||
| CVE-2019-5748 | Cri | 0.64 | 9.8 | 0.02 | Jan 9, 2019 | In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks. | ||
| CVE-2018-1000881 | Cri | 0.64 | 9.8 | 0.04 | Dec 20, 2018 | Traccar Traccar Server version 4.0 and earlier contains a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in ComputedAttributesHandler.java that can result in Remote Command Execution. This attack appear to be exploitable via Remote: web… |
- risk 0.64cvss 9.8epss 0.01
Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by the Traccar solution that should otherwise be protected by the authentication…
- risk 0.64cvss 9.8epss 0.02
In Traccar Server version 4.2, protocol/SpotProtocolDecoder.java might allow XXE attacks.
- risk 0.64cvss 9.8epss 0.04
Traccar Traccar Server version 4.0 and earlier contains a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in ComputedAttributesHandler.java that can result in Remote Command Execution. This attack appear to be exploitable via Remote: web…