Vulnerabilities > Atos > High

DATE CVE VULNERABILITY TITLE RISK
2023-06-12 CVE-2023-35033 Command Injection vulnerability in Atos products
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23556.
network
low complexity
atos CWE-77
8.8
2023-06-12 CVE-2023-35035 Command Injection vulnerability in Atos products
Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8, Assistant V10 R0, Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8, and Manager V10 R0 allow command injection by authenticated users, aka OSFOURK-23557.
network
low complexity
atos CWE-77
8.8
2023-04-14 CVE-2023-30638 Command Injection vulnerability in Atos products
Atos Unify OpenScape SBC 10 before 10R3.1.3, OpenScape Branch 10 before 10R3.1.2, and OpenScape BCF 10 before 10R10.7.0 allow remote authenticated admins to inject commands.
network
low complexity
atos CWE-77
7.2
2020-02-21 CVE-2019-19866 Authorization Bypass Through User-Controlled Key vulnerability in Atos Unify Openscape UC web Client 10.0/9.0
Atos Unify OpenScape UC Web Client V9 before version V9 R4.31.0 and V10 before version V10 R0.6.0 allows remote attackers to obtain sensitive information.
network
low complexity
atos CWE-639
7.5