Tenable ASUSTOR Data Master vulnerabilities
6 published CVEs name Tenable ASUSTOR Data Master among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2018-15699
ASUSTOR Data Master 3.1.5 and below makes an HTTP request for a configuration file that is vulnerable to XSS. A man in the middle can take advantage of this by…
Tenable · ASUSTOR Data Master
Medium6.1 - CVE-2018-15698
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file system when providing the full path to…
Tenable · ASUSTOR Data Master
Medium6.5 - CVE-2018-15697
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on a share by providing the full path. For example,…
Tenable · ASUSTOR Data Master
Medium6.5 - CVE-2018-15696
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi.
Tenable · ASUSTOR Data Master
Medium4.3 - CVE-2018-15695
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to delete any file on the file system due to a path traversal…
Tenable · ASUSTOR Data Master
Medium6.5 - CVE-2018-15694
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to upload files to arbitrary locations due to a path traversal…
Tenable · ASUSTOR Data Master
High7.5