Skip to content

Vendor

ayesa vulnerabilities

2 published CVES affecting ayesa, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of ayesa alerts

Products

Latest ayesa CVEs

Newest publication first

  1. CVE-2023-3350 Cryptographic Issues on IBERMATICA RPS

    Published
    HighCVSS 7.5 EPSS 0.29%

    A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the log file, an attacker could retrieve the SQL query sent to the application in plaint text. This log file contains the password hashes coded with AES-CBC-128 bi...

  2. CVE-2023-3349 Information exposure on IBERMATICA RPS

    Published
    HighCVSS 7.5 EPSS 0.50%

    Information exposure vulnerability in IBERMATICA RPS 2019, which exploitation could allow an unauthenticated user to retrieve sensitive information, such as usernames, IP addresses or SQL queries sent to the application. By accessing the URL /RPS2019Service/status.html, the appli...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.