Vulnerabilities > IPA > Appgoat > Medium

DATE CVE VULNERABILITY TITLE RISK
2017-06-09 CVE-2017-2182 Unspecified vulnerability in IPA Appgoat 3.0.0/3.0.1
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2181.
network
ipa
6.8
2017-06-09 CVE-2017-2181 Unspecified vulnerability in IPA Appgoat 3.0.0/3.0.1
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2182.
network
ipa
6.8
2017-06-09 CVE-2017-2180 Information Exposure vulnerability in IPA Appgoat 3.0.0/3.0.1
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors.
network
ipa CWE-200
4.3
2017-06-09 CVE-2017-2179 Improper Input Validation vulnerability in IPA Appgoat 3.0.0/3.0.1
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allows remote code execution via unspecified vectors, a different vulnerability than CVE-2017-2181 and CVE-2017-2182.
network
ipa CWE-20
6.8
2017-04-28 CVE-2017-2102 Cross-Site Request Forgery (CSRF) vulnerability in IPA Appgoat 3.0.0
Cross-site request forgery (CSRF) vulnerability in Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
network
ipa CWE-352
6.8
2017-04-28 CVE-2017-2100 Improper Input Validation vulnerability in IPA Appgoat 3.0.0/3.0.1
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.1 and earlier allows remote attackers to conduct DNS rebinding attacks via unspecified vectors.
network
ipa CWE-20
6.8
2017-04-28 CVE-2017-2099 Remote Code Execution vulnerability in IPA Appgoat 3.0.0
Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.0 and earlier allows remote code execution via unspecified vectors.
network
ipa
6.8