EginnovationsCVEs & Vulnerabilities
3 CVEs affecting Eginnovations products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
3 CVEs→ All vendors
Most Affected Products
eg manager 3eg agent 1eg rum collectors 1vm agent 1
CVE-2022-29594HIGH
eG Agent before 7.2 has weak file permissions that enable escalation of privileges to SYSTEM.
3 Jun 2022
7.8
CVSS
CVE-2020-8592CRITICAL
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet (aka the Forgot Password feature).
4 Feb 2020
9.8
CVSS
CVE-2020-8591CRITICAL
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request.
4 Feb 2020
9.8
CVSS
← PrevPage 1 / 1Next →