← Back

Lynxspring

lynxspring

4 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Jenesys Bas Bridge
jenesys_bas_bridge
4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-8378
1Lynxspring
1Jenesys Bas Bridge
May 13, 2026
Feb 13, 2017
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application's database lacks sufficient safeguards for protecting credentials.
CVE-2016-8369
1Lynxspring
1Jenesys Bas Bridge
May 13, 2026
Feb 13, 2017
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request (CROSS-SITE RE...Show more
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request (CROSS-SITE REQUEST FORGERY).Show less
CVE-2016-8361
1Lynxspring
1Jenesys Bas Bridge
May 13, 2026
Feb 13, 2017
N/A· v4
8.6 HIGH· v3
7.5 HIGH· v2
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. The application uses a hard-coded username with no password allowing an attacker into the system without authentication.
CVE-2016-8357
1Lynxspring
1Jenesys Bas Bridge
May 13, 2026
Feb 13, 2017
N/A· v4
7.1 HIGH· v3
5.5 MEDIUM· v2
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands. This would allow an attack...Show more
An issue was discovered in Lynxspring JENEsys BAS Bridge versions 1.1.8 and older. A user with read-only access can send commands to the software and the application will accept those commands. This would allow an attacker with read-only access to make changes within the application.Show less