📦

vitalsuite

Vendor: lucent

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 1 Code Available
Total RCEs 0 Remote Access
Total CVEs 1 Total Indexed
Avg. EPSS 3.88% Exploit Prob.
Latest CVE CVE-2021-41487 Jun 16

Security Vulnerability Index

Page 1 / 1
9.8 CVSS
CVE-2021-41487

NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'.

EPSS: 0.48%
7.5 CVSS
CVE-2002-0236
Exploit Found

Lucent VitalSuite 8.0 through 8.2, including VitalNet, VitalEvent, and VitalHelp/VitalAnalysis, allows remote attackers to bypass authentication via a direct HTTP request to the VsSetCookie.exe program, which returns a valid cookie for the desired user.

EPSS: 7.28%