Bigantsoft: community verdicts

8 notable / known-exploited Bigantsoft CVEs the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Bigantsoft CVE, see NVD ↗.

CVE-2022-23347HIGH 7.5EPSS 13%
BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.
CVE-2022-23348MED 5.3EPSS 3%
BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.
CVE-2022-23352HIGH 7.5Real · low riskEPSS 2%
An issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).
CVE-2022-23345HIGH 7.5Real · low riskEPSS 2%
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.
CVE-2022-23346HIGH 8.8Real · low riskEPSS 2%
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.
CVE-2022-26281HIGH 7.5Real · low riskEPSS 1%
BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.
CVE-2022-23350MED 5.4EPSS 1%
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.
CVE-2022-23349HIGH 8.8Real · low riskEPSS 1%
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).