← Back

Corero

corero

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Securewatch Managed Services
securewatch_managed_services
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-38137
1Corero
1Securewatch Managed Services
Jun 17, 2026
Aug 6, 2021
N/A· v4
8.1 HIGH· v3
5.5 MEDIUM· v2
Corero SecureWatch Managed Services 9.7.2.0020 does not correctly check swa-monitor and cns-monitor user’s privileges, allowing a user to perform actions not belonging to his role.
CVE-2021-38136
1Corero
1Securewatch Managed Services
Jun 17, 2026
Aug 6, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splunkd/__raw/services/get_snapshot HTTP API endpoint. A ‘low privileged’ attacker ca...Show more
Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splunkd/__raw/services/get_snapshot HTTP API endpoint. A ‘low privileged’ attacker can read any file on the target host.Show less