Medium
CVSS: 6.5
An issue in 4C Strategies Exonaut before v22.4 allows attackers to execute a directory traversal.
Medium
CVSS: 5.3
An issue was discovered in 4C Strategies Exonaut 21.6. Passwords, stored in the database, are hashed without a salt.
Medium
CVSS: 5.3
4C Strategies Exonaut before v22.4 was discovered to contain an access control issue.
Medium
CVSS: 6.5
4C Strategies Exonaut before v21.6.2.1-1 was discovered to contain a Server-Side Request Forgery (SSRF).
Medium
CVSS: 6.5
4C Strategies Exonaut before v22.4 was discovered to contain insecure permissions.
High
CVSS: 7.5
An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. Information disclosure can occur via an external HTTPS request.
Critical
CVSS: 9.8
An issue was discovered in ExonautWeb in 4C Strategies Exonaut 21.6. There are verbose error messages.