Vulnerabilities > 42Gears > Suremdm > 6.34

DATE CVE VULNERABILITY TITLE RISK
2019-02-05 CVE-2018-15659 Information Exposure vulnerability in 42Gears Suremdm 6.31/6.34
An issue was discovered in 42Gears SureMDM before 2018-11-27, related to the access policy for Silverlight applications.
network
low complexity
42gears CWE-200
6.5
6.5
2019-02-05 CVE-2018-15658 Information Exposure vulnerability in 42Gears Suremdm 6.31/6.34/6.35
An issue was discovered in 42Gears SureMDM before 2018-11-27.
network
low complexity
42gears CWE-200
7.5
7.5
2019-02-05 CVE-2018-15657 Server-Side Request Forgery (SSRF) vulnerability in 42Gears Suremdm 6.31/6.34/6.35
An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter.
local
low complexity
42gears CWE-918
7.3
7.3
2019-02-05 CVE-2018-15656 Information Exposure vulnerability in 42Gears Suremdm 6.31/6.34/6.35
An issue was discovered in the registration API endpoint in 42Gears SureMDM before 2018-11-27.
network
low complexity
42gears CWE-200
7.5
7.5
2019-02-05 CVE-2018-15655 Information Exposure vulnerability in 42Gears Suremdm 6.31/6.34
An issue was discovered in 42Gears SureMDM before 2018-11-27, related to CORS settings.
network
low complexity
42gears CWE-200
6.5
6.5