Maxum Rumpus 8.2.10

CPE Details

Maxum Rumpus 8.2.10
maxum
rumpus
8.2.10
2020-02-06
20h15 +00:00
2020-02-06
20h15 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:maxum:rumpus:8.2.10:*:*:*:*:*:*:*

Informations

Vendor

maxum

Product

rumpus

Version

8.2.10

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-39187 2023-01-12 00h00 +00:00 Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vectors.
6.8
Medium
CVE-2022-46367 2023-01-12 00h00 +00:00 Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation.
8.8
High
CVE-2022-46368 2023-01-12 00h00 +00:00 Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users.
8.8
High
CVE-2022-46369 2023-01-12 00h00 +00:00 Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts into unspecified input fields.
6.8
Medium
CVE-2022-46370 2023-01-12 00h00 +00:00 Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification.
7.5
High
CVE-2020-8514 2020-02-02 13h06 +00:00 An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functionality.
6.1
Medium
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.