Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-28851 State: PUBLISHED Published: 2022-09-30T16:55:58.415Z Last Updated: 2025-04-23T16:53:23.920Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Adobe Products: Experience Manager Problem Types: CWE-79 Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
tion of this issue requires low-privilege access to AEM. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE ID: CVE-2022-28852 State: PUBLISHED Published: 2022-09-16T17:20:05.656Z Last Updated: 2025-04-23T17:07:32.015Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-787 Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE ID: CVE-2022-28853 State: PUBLISHED Published: 2022-09-16T17:20:02.297Z Last Updated: 2025-04-23T17:07:37.744Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Adobe Products: InDesign Problem Types: CWE-787 Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/ap
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE ID: CVE-2022-28854 State: PUBLISHED Published: 2022-09-16T17:20:10.927Z Last Updated: 2025-04-23T17:07:20.753Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: InDesign Problem Types: CWE-125 Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://helpx.adobe.com/security/products/indesign/apsb22-50.html
CVE ID: CVE-2022-28855 State: PUBLISHED Published: 2022-09-16T17:20:20.073Z Last Updated: 2025-04-23T17:07:02.265Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: InDesign Problem Types: CWE-125 Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
CVE ID: CVE-2022-28856 State: PUBLISHED Published: 2022-09-16T17:20:08.306Z Last Updated: 2025-04-23T17:07:26.231Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: InDesign Problem Types: CWE-125 Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
CVE ID: CVE-2022-28857 State: PUBLISHED Published: 2022-09-16T17:20:17.187Z Last Updated: 2025-04-23T17:07:08.259Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Adobe Products: InDesign Problem Types: CWE-125 Description: Adobe InDesign versions 16.4.2 (and earlier) and 17.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - h
CVE ID: CVE-2022-28858 State: PUBLISHED Published: 2022-08-18T20:03:10.000Z Last Updated: 2025-02-18T15:28:03.805Z Vendors: n/a Products: Intel(R) NUC Laptop Kits Problem Types: escalation of privilege Description: Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE ID: CVE-2022-28859 State: PUBLISHED Published: 2022-05-05T16:42:31.984297Z Last Updated: 2024-09-16T22:10:27.393Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-532 Description: On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts (nethsm-safenet-install.sh and nethsm-thales-install.sh) expose the Net HSM partition password. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CVE Program Container: References: - https://support.f5.com/csp/article/K47662005
CVE ID: CVE-2022-28860 State: PUBLISHED Published: 2022-07-21T00:00:00 Last Updated: 2024-08-03T06:03:53.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authentication downgrade in the server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to achieve HTTP access to the camera. Additional Analyst Notes: - CVE Program Container: References: - https://www.citilog.com - https://github.com/ErwanBroquaire/citilog-8.0-vulnerability - https://www.citilog.com/wp-content/uploads/2023/07/CitilogSAS_information_note_2021-10-18-English.pdf
CVE ID: CVE-2022-28861 State: PUBLISHED Published: 2022-07-21T00:00:00 Last Updated: 2024-08-03T06:03:53.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to see FTP credentials in a cleartext HTTP traffic. These can be used for FTP access to the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.citilog.com - https://github.com/ErwanBroquaire/citilog-8.0-vulnerability - https://www.citilog.com/wp-content/uploads/2023/07/CitilogSAS_information_note_2021-10-18-English.pdf
CVE ID: CVE-2022-28862 State: PUBLISHED Published: 2022-05-25T11:08:14 Last Updated: 2024-08-03T06:03:53.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr. Through the injection of arbitrary SQL statements, a potential attacker can modify query syntax and perform unauthorized (and unexpected) operations against the remote database. This is fixed in all recent versions, such as version 26.2. Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.gru
Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-28863 State: PUBLISHED Published: 2023-07-24T00:00:00 Last Updated: 2024-10-24T18:00:49.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily upload potentially dangerous files without restrictions via the /netact/sct dir parameter in conjunction with the operation=upload value. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-28864 State: PUBLISHED Published: 2023-07-24T00:00:00 Last Updated: 2024-10-24T15:04:02.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the templateName parameter in order to include malicious code, which is then downloaded as a .csv or .xlsx file and executed on a victim machine. Here, the /aom/html/EditTemplate.jsf and /aom/html/ViewAllTemplatesPage.jsf templateName parameter is used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.telecomitalia.com/tit/it/innovazione/cy
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-28865 State: PUBLISHED Published: 2023-07-24T00:00:00 Last Updated: 2024-10-24T15:02:43.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to victims. Here, the /netact/sct filename parameter is used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refe
/netact/sct filename parameter is used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-28866 State: PUBLISHED Published: 2022-10-11T00:00:00 Last Updated: 2024-08-03T06:03:53.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI < R18 Firmware v4.13.00. It does not properly validate requests for access to (or editing of) data and functionality in all endpoints under /#settings/* and /api/settings/*. By not verifying the permissions for access to resources, it allows a potential attacker to view pages, with sensitive data, that are not allowed, and modify system configurations also causing DoS, which should be accessed only by user with administration profile, bypassing all
ystem configurations also causing DoS, which should be accessed only by user with administration profile, bypassing all controls (without checking for user identity). Additional Analyst Notes: - CVE Program Container: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-28867 State: PUBLISHED Published: 2023-07-24T00:00:00 Last Updated: 2024-10-24T14:59:54.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the templateName parameter in order to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to victims. Here, the /aom/html/EditTemplate.jsf and /aom/html/ViewAllTemplatesPage.jsf templateName parameter is used. Addit
ctims. Here, the /aom/html/EditTemplate.jsf and /aom/html/ViewAllTemplatesPage.jsf templateName parameter is used. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.telecomitalia.com/tit/it/innovazione/cybersecurity/red-team.html - https://www.gruppotim.it/it/footer/red-team.html
CVE ID: CVE-2022-28868 State: PUBLISHED Published: 2022-04-15T10:21:09 Last Updated: 2024-08-03T06:03:53.153Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: F-Secure Mobile Security Problem Types: Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android Description: An Address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted malicious webpage/URL, user may be tricked for a short period of time (until the page loads) to think content may be coming from a valid domain, while the content comes from the attacker controlled site. Additional Analyst Notes: - CVE Progra
g from a valid domain, while the content comes from the attacker controlled site. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/home/support/security-advisories - https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28868
CVE ID: CVE-2022-28869 State: PUBLISHED Published: 2022-04-15T10:21:55 Last Updated: 2024-08-03T06:03:53.135Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: F-Secure Mobile Security Problem Types: Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android Description: A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the browser did not show full URL, such as port number. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/home/support/security-advisories - https://www.f-secure.com/en/
ram Container: References: - https://www.f-secure.com/en/home/support/security-advisories - https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28869
CVE ID: CVE-2022-28870 State: PUBLISHED Published: 2022-04-15T10:20:27 Last Updated: 2024-08-03T06:03:53.215Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: F-Secure Mobile Security Problem Types: Address Bar Spoofing Vulnerability in F-Secure SAFE Browser for Android Description: A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/home/support/security-advisories - https://www.f-secure.com/en/hom
Container: References: - https://www.f-secure.com/en/home/support/security-advisories - https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28870
CVE ID: CVE-2022-28871 State: PUBLISHED Published: 2022-04-25T10:14:52 Last Updated: 2024-08-03T06:03:53.160Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: All F-Secure Endpoint Protection products on Windows and Mac F-Secure Linux Security (32-bit) F-Secure Linux Security 64 F-Secure Atlant F-Secure Internet Gatekeeper F-Secure Cloud Protection for Salesforce Problem Types: Denial of Service Vulnerability Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant whereby the fsicapd component used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can c
t used in certain F-Secure products while scanning larger packages/fuzzed files consume too much memory eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.withsecure.com/en/support/security-advisories/cve-2022-28871 - https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28871
CVE ID: CVE-2022-28872 State: PUBLISHED Published: 2022-05-12T11:16:00 Last Updated: 2024-08-03T06:03:53.215Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: F-Secure Mobile Security Problem Types: Address Bar Spoofing Vulnerability Description: A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar spoofing as the address bar was not correct if navigation fails in a loop. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/home/support/security-advisories
CVE ID: CVE-2022-28873 State: PUBLISHED Published: 2022-05-12T11:16:14 Last Updated: 2024-08-03T06:03:53.217Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: F-Secure Mobile Security Problem Types: Address Bar Spoofing Vulnerability Description: A vulnerability affecting F-Secure SAFE browser was discovered. An attacker can potentially exploit Javascript window.open functionality in SAFE Browser which could lead address bar spoofing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/home/support/security-advisories - https://www.f-secure.com/en/home/support/security-advisories/cve-2022-288
cure.com/en/home/support/security-advisories - https://www.f-secure.com/en/home/support/security-advisories/cve-2022-28873
CVE ID: CVE-2022-28874 State: PUBLISHED Published: 2022-05-23T10:28:30 Last Updated: 2024-08-03T06:03:53.226Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: F-Secure endpoint protection products for Windows and Mac. F-Secure Linux Security (32-bit). F-Secure Linux Security 64. F-Secure Atlant. WithSecure Cloud Protection for Salesforce & WithSecure Collaboration Protection Problem Types: Multiple Denial-of-Service (DoS) Vulnerabilities Description: Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer
Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. The exploit can be triggered remotely by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/home/support/security-advisories - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2022-28875 State: PUBLISHED Published: 2022-05-25T15:09:30 Last Updated: 2024-08-03T06:03:53.164Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: All F-Secure & WithSecure endpoint protection products for Windows and Mac. F-Secure Linux Security (32-bit). F-Secure Linux Security (64-bit). F-Secure Atlant. WithSecure Cloud Protection for Salesforce & WithSecure Collaboration Protection Problem Types: Denial-of-Service (DoS) Vulnerability Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engin
ecure Atlant and in certain WithSecure products whereby the scanning the aemobile component can crash the scanning engine. The exploit can be triggered remotely by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/support-and-downloads/security-advisories - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2022-28876 State: PUBLISHED Published: 2022-07-14T14:45:07 Last Updated: 2024-08-03T06:03:53.142Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: All F-Secure & WithSecure endpoint protection products for Windows and Mac. F-Secure Linux Security (32-bit). F-Secure Linux Security (64-bit). F-Secure Atlant. WithSecure Cloud Protection for Salesforce & WithSecure Collaboration Protection Problem Types: Denial-of-Service (DoS) Vulnerability Description: A Denial-of-Service (DoS) vulnerability was discovered in F-Secure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning eng
ecure Atlant and in certain WithSecure products whereby the scanning the aeheur.dll component can crash the scanning engine. The exploit can be triggered remotely by an attacker. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/support-and-downloads/security-advisories - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2022-28877 State: PUBLISHED Published: 2022-07-21T15:32:45 Last Updated: 2024-08-03T06:03:53.220Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure and WithSecure Products: All F-Secure and WithSecure Endpoint Protection Products for Windows Problem Types: Local Privilege Escalation Vulnerability in F-Secure & WithSecure Windows Endpoint Products Description: This vulnerability allows local user to delete arbitrary file in the system and bypassing security protection which can be abused for local privilege escalation on affected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machi
ffected F-Secure & WithSecure windows endpoint products. An attacker must have code execution rights on the victim machine prior to successful exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/support-and-downloads/security-advisories - https://www.withsecure.com/en/support/security-advisories
CVE ID: CVE-2022-28878 State: PUBLISHED Published: 2022-07-22T15:29:00 Last Updated: 2024-08-03T06:03:53.155Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L) Vendors: F-Secure Products: All F-Secure and WithSecure Endpoint Protection products for Windows & Mac F-Secure Linux Security 64 F-Secure Linux Security 32 F-Secure Atlant F-Secure Internet Gatekeeper WithSecure Cloud Protection for Salesforce WithSecure Collaboration Protection Problem Types: Denial-of-Service (DoS) Vulnerability Description: A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash th
n the F-Secure Atlant and in certain WithSecure products while scanning fuzzed APK file it is possible that can crash the scanning engine. Additional Analyst Notes: - CVE Program Container: References: - https://www.f-secure.com/en/business/support-and-downloads/security-advisories - https://www.withsecure.com/en/support/security-advisories