Desktopalert Pingalert Application Server vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Desktopalert Pingalert Application Server: 15 record(s), with affected versions and fixes.cpe:2.3:a:desktopalert:pingalert_application_server
CVE-2025-54563
High · 7.5
CWE-284 Nov 24, 2025
Improper Access Control in Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Incorrect Access Control, leading to Remote Information Disclosure.
CVE-2025-54347
Critical · 9.9
CWE-22 Nov 24, 2025
Path Traversal in Desktopalert Pingalert Application Server
A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions.
CVE-2025-54341
Medium · 5.3
CWE-798 Nov 24, 2025
Use of Hard-coded Credentials in Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There are Hard-coded configuration values.
CVE-2025-54338
High · 7.5
CWE-284 Nov 24, 2025
Improper Access Control in Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes.
CVE-2025-54562
Medium · 4.3
CWE-209 Nov 14, 2025
Information Exposure Through an Error Message in Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Technical Information to be Disclosed through stack trace.
CVE-2025-54561
Medium · 4.3
CWE-284 Nov 14, 2025
Improper Access Control in Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote access to content despite lack of the correct permission through a Broken Authorization Schema.
CVE-2025-54560
Low · 3.8
CWE-918 Nov 14, 2025
Server-Side Request Forgery (SSRF) in Desktopalert Pingalert Application Server
A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure.
CVE-2025-54559
Low · 3.7
CWE-22 Nov 14, 2025
Path Traversal in Desktopalert Pingalert Application Server
An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote Path Traversal for loading arbitrary external content.
CVE-2025-54348
Medium · 6.5
CWE-80 Nov 14, 2025
A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of…
A Stored Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information.
CVE-2025-54346
High · 7.6
CWE-80 Nov 14, 2025
A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server…
A Reflected Cross Site Scripting (XSS) vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to hijack user’s browser, capturing sensitive information.
CVE-2025-54345
High · 7.5
CWE-200 Nov 14, 2025
Exposure of Sensitive Information in Desktopalert Pingalert Application Server
An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. Sensitive Information is exposed to an Unauthorized Actor.
CVE-2025-54343
Critical · 9.6
CWE-284 Nov 14, 2025
Improper Access Control in Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges.
CVE-2025-54342
Low · 3.3
CWE-312 Nov 14, 2025
Cleartext Storage of Sensitive Information in Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is Exposure of Sensitive Information because of Incompatible Policies.
CVE-2025-54340
Medium · 4.1
CWE-327 Nov 14, 2025
Use of a Broken or Risky Cryptographic Algorithm in Desktopalert Pingalert Application Server
A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. There is a Broken or Risky Cryptographic Algorithm.
CVE-2025-54339
Critical · 10.0
CWE-284 Nov 14, 2025
Improper Access Control in Desktopalert Pingalert Application Server
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 exploitable remotely for Escalation of Privileges.