Vulnerabilities > Withsecure
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-09-18 | CVE-2023-42525 | Infinite Loop vulnerability in Withsecure products Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types. | 7.5 |
| 2023-09-18 | CVE-2023-42520 | Resource Exhaustion vulnerability in Withsecure products Certain WithSecure products allow a remote crash of a scanning engine via unpacking of crafted data files. | 7.5 |
| 2023-09-18 | CVE-2023-42526 | Resource Exhaustion vulnerability in Withsecure products Certain WithSecure products allow a remote crash of a scanning engine via decompression of crafted data files. | 7.5 |
| 2022-11-17 | CVE-2022-38165 | Unspecified vulnerability in Withsecure F-Secure Policy Manager Arbitrary file write in F-Secure Policy Manager through 2022-08-10 allows unauthenticated users to write the file with the contents in arbitrary locations on the F-Secure Policy Manager Server. | 9.8 |
| 2022-10-25 | CVE-2022-38162 | Cross-site Scripting vulnerability in Withsecure F-Secure Policy Manager Reflected cross-site scripting (XSS) vulnerabilities in WithSecure through 2022-08-10) exists within the F-Secure Policy Manager due to an unvalidated parameter in the endpoint, which allows remote attackers to provide a malicious input. | 6.1 |
| 2022-09-06 | CVE-2022-28884 | Infinite Loop vulnerability in multiple products A Denial-of-Service vulnerability was discovered in the F-Secure and WithSecure products where aerdl.dll may go into an infinite loop when unpacking PE files. | 7.5 |
| 2022-05-23 | CVE-2022-28874 | Out-of-bounds Write vulnerability in multiple products Multiple Denial-of-Service vulnerabilities was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files cause memory corruption and heap buffer overflow which eventually can crash the scanning engine. | 7.5 |