VendorsSynametricssynamanall versions
Vulnerabilities

Synametrics SynaMan

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2022-26251
The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges.
Published 2022-04-06 · Modified
9.0EPSS 0.019
CVE-2015-3140
Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567
Published 2019-11-21 · Modified
8.83 PoCEPSS 0.013
CVE-2018-10814
Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.
Published 2018-09-14 · Modified
7.81 PoCEPSS 0.014
CVE-2022-26250
Synaman v5.1 and below was discovered to contain weak file permissions which allows authenticated attackers to escalate privileges.
Published 2022-04-06 · Modified
7.8EPSS 0.003
CVE-2022-22828
An insecure direct object reference for the file-download URL in Synametrics SynaMan before 5.0 allows a remote attacker to access unshared files via a modified base64-encoded filename string.
Published 2022-01-27 · Modified
7.5EPSS 0.021
CVE-2018-10763
Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial Branding configuration page.
Published 2018-09-14 · Modified
4.81 PoCEPSS 0.017