Vulnerabilidades do syslink software AG Avantra

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam syslink software AG Avantra: 5 registro(s), com versões afetadas e correções.

CVE-2026-8673 Crítica · 9.1 CWE-523 22/05/2026

Password re-initialization mechanism sends passwords in plain text

Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks. This issue affects Avantra: before 25.3.0.

CVE-2026-8672 Média · 5.1 CWE-1393 22/05/2026

Default credentials for internal DB

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.

CVE-2026-8671 Alta · 7.5 CWE-532 22/05/2026

Log Files contain encrypted secrets

Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure. This issue affects Avantra: before 25.3.0.

CVE-2026-8670 Crítica · 9.6 CWE-613 22/05/2026

Insecure session handling on metrics web server

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.

CVE-2026-3873 Alta · 7.2 CWE-798 13/03/2026

Legacy built-in user account

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0.