Filtered by vendor Cososys Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2014-3932 1 Cososys 1 Endpoint Protector 2022-10-03 N/A
SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 4.3.0.4 and 4.4.0.2 allows remote attackers to execute arbitrary SQL commands via unspecified parameters.
CVE-2019-13285 1 Cososys 1 Endpoint Protector 2020-05-11 7.5 High
CoSoSys Endpoint Protector 5.1.0.2 allows Host Header Injection.
CVE-2012-2994 1 Cososys 1 Endpoint Protector Appliace 4 2013-03-02 N/A
The CoSoSys Endpoint Protector 4 appliance establishes an EPProot password based entirely on the appliance serial number, which makes it easier for remote attackers to obtain access via a brute-force attack.