ipass vulnerabilities

Products

• ipass open mobile 1
• roamserver 1

Latest ipass CVEs

Newest publication first

1. CVE-2015-0925 The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subpr...

   Published 2015-01-22

   High·CVSS 9.0 EPSS 52.2% Framework module Public exploit

   The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe, as demonstrated by a UNC share pathname.

2. CVE-1999-1274 iPass RoamServer 3.1 creates temporary files with world-writable permissions.

   Published 2001-09-12

   Medium·CVSS 6.4 EPSS 1.1%

   iPass RoamServer 3.1 creates temporary files with world-writable permissions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.