IBM Datacap Taskmaster Capture vulnerabilities

5 CVEs affecting IBM Datacap Taskmaster Capture, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0879, published 2014-03-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0879, published 2014-03-21. High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in the Taskmaster Capture ActiveX control in IBM Datacap Taskmaster Capture 8.0.1, and 8.1 before FP2, allows remote attackers to execute arbitrary code via unspecified…
CVE-2011-2144, published 2011-05-16. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service (batch abort) via a long subject line in…
CVE-2011-2143, published 2011-05-16. Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obtain login access by using an incorrect password in conjunction with an account…
CVE-2011-2141, published 2011-05-16. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2011-2142, published 2011-05-16. Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days. The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unspecified impact and attack vectors.