Vulnerabilities > Aquaforest > Tiff Server > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-11-30 CVE-2023-6352 Path Traversal vulnerability in Aquaforest Tiff Server 4.2.210913
The default configuration of Aquaforest TIFF Server allows access to arbitrary file paths, subject to any restrictions imposed by Internet Information Services (IIS) or Microsoft Windows.
network
low complexity
aquaforest CWE-22
5.3
2020-03-18 CVE-2020-9323 Path Traversal vulnerability in Aquaforest Tiff Server 4.0
Aquaforest TIFF Server 4.0 allows Unauthenticated File and Directory Enumeration via tiffserver/tssp.aspx.
network
low complexity
aquaforest CWE-22
5.3