Vulnerabilidades de Avantra

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Avantra: 4 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-8673 Crítica · 9.1 CWE-523 22/05/2026

Password re-initialization mechanism sends passwords in plain text

Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks. This issue affects Avantra: before 25.3.0.

CVE-2026-8672 Média · 5.1 CWE-1393 22/05/2026

Default credentials for internal DB

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.

CVE-2026-8671 Alta · 7.5 CWE-532 22/05/2026

Log Files contain encrypted secrets

Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure. This issue affects Avantra: before 25.3.0.

CVE-2026-8670 Crítica · 9.6 CWE-613 22/05/2026

Insecure session handling on metrics web server

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.