← Back

Comparex

comparex

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Miss Marple
miss_marple
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-19234
1Comparex
1Miss Marple
Nov 21, 2024
Dec 20, 2018
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
The Miss Marple Updater Service in COMPAREX Miss Marple Enterprise Edition before 2.0 allows remote attackers to execute arbitrary code with SYSTEM privileges via vectors related to missing update validation.
CVE-2018-19233
1Comparex
1Miss Marple
Nov 21, 2024
Dec 20, 2018
N/A· v4
7.8 HIGH· v3
2.1 LOW· v2
COMPAREX Miss Marple Enterprise Edition before 2.0 allows local users to execute arbitrary code by reading the user name and encrypted password hard-coded in an Inventory Agent configuration file.