Flexense: >> Vx Search >> 10.1.12 Security Vulnerabilities
XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-05-02
In Flexense VX Search Enterprise v10.1.12, the Control Protocol suffers from a denial of service vulnerability. The attack vector is a crafted SERVER_GET_INFO packet sent to control port 9123.
CVSS Score
7.5
EPSS Score
0.096
Published
2018-01-10
Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ substring. This allows remote attackers to execute arbitrary code.
CVSS Score
9.8
EPSS Score
0.124
Published
2017-10-11