Carrier Automatedlogic Webctrl vulnerabilities

5 CVEs affecting Carrier Automatedlogic Webctrl, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-8819, published 2018-06-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-9640, published 2017-08-25. Medium severity, CVSS 6.3. EPSS: 8.5% chance of exploitation in the next 30 days. A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC…
CVE-2018-8819, published 2018-06-14. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. An XXE issue was discovered in Automated Logic Corporation (ALC) WebCTRL Versions 6.0, 6.1 and 6.5. An unauthenticated attacker could enter malicious input to WebCTRL and a weakly configured XML…
CVE-2017-9650, published 2017-08-25. High severity, CVSS 7.8. EPSS: 2.4% chance of exploitation in the next 30 days. An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior;…
CVE-2016-5795, published 2017-08-31. High severity, CVSS 7.3. EPSS: 2.2% chance of exploitation in the next 30 days. An XXE issue was discovered in Automated Logic Corporation (ALC) Liebert SiteScan Web Version 6.5 and prior, ALC WebCTRL Version 6.5 and prior, and Carrier i-Vu Version 6.5 and prior. An attacker…
CVE-2017-9644, published 2017-08-25. High severity, CVSS 7.0. EPSS: 1.4% chance of exploitation in the next 30 days. An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu…