Filtered by vendor Aquaforest Subscriptions
Filtered by product Tiff Server Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-6352 1 Aquaforest 1 Tiff Server 2023-12-11 5.3 Medium
The default configuration of Aquaforest TIFF Server allows access to arbitrary file paths, subject to any restrictions imposed by Internet Information Services (IIS) or Microsoft Windows. Depending on how a web application uses and configures TIFF Server, a remote attacker may be able to enumerate files or directories, traverse directories, bypass authentication, or access restricted files.
CVE-2020-9323 1 Aquaforest 1 Tiff Server 2021-07-21 5.3 Medium
Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx.
CVE-2020-9325 1 Aquaforest 1 Tiff Server 2021-07-21 7.5 High
Aquaforest TIFF Server 4.0 allows Unauthenticated Arbitrary File Download.
CVE-2020-9324 1 Aquaforest 1 Tiff Server 2020-03-20 7.5 High
Aquaforest TIFF Server 4.0 allows Unauthenticated SMB Hash Capture via UNC.