Sysax - vulnerabilities (CVEs)
12 CVEs in 1 products, 0 in the last 30 days, newest from 2026-01-13.
Products
- Multi Server - 12 CVEs
Newest CVEs of Sysax
- CVE-2023-54337 - CVSS 9.1 (critical), 2026-01-13: Sysax Multi Server 6.95 contains a denial of service vulnerability in the administrative password field that allows attackers to crash the application.…
- CVE-2012-10060 - CVSS 9.8 (critical), 2025-08-13: Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overly long username…
- CVE-2013-10065 - CVSS 8.7 (high), 2025-08-05: A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a…
- CVE-2024-53458 - CVSS 7.5 (high), 2025-03-05: Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH packets.
- CVE-2024-53459 - CVSS 6.1 (medium), 2024-12-02: Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter.
- CVE-2020-23574 - CVSS 6.5 (medium), 2020-08-19: When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfile_name1.htm form to a length of…
- CVE-2020-13229 - CVSS 8.8 (high), 2020-06-02: An issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any /scgi URI, because it is an authentication…
- CVE-2020-13228 - CVSS 6.1 (medium), 2020-06-02: An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter.
- CVE-2020-13227 - CVSS 5.3 (medium), 2020-06-02: An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under which the web server is running) by triggering an invalid…
- CVE-2012-6530 - CVSS 7.1 (high), 2013-01-31: Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to…
- CVE-2009-4800 - CVSS 4 (medium), 2010-04-22: Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash…
- CVE-2009-4790 - CVSS 9 (critical), 2010-04-22: Multiple directory traversal vulnerabilities in Sysax Multi Server 4.5 allow remote authenticated users to read or modify arbitrary files via crafted FTP…
