Kemptechnologies vulnerabilities
5 vulnerabilities
Known vulnerabilities in Kemptechnologies products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 5 products.
Products
5- Web Application Firewall2 vulnerabilities
- Load Master1 vulnerabilities
- Loadmaster1 vulnerabilities
- Loadmaster Operating System1 vulnerabilities
- Multi Tenant Hypervisor1 vulnerabilities
CVE-2018-9091kemptechnologiesloadmaster_operating_system
EPSS score3.33%
A critical vulnerability in the KEMP LoadMaster Operating System (LMOS) 6.0.44 through 7.2.41.2 and Long Term Support (LTS) LMOS before 7.1.35.5 related to Session Management could allow an unauthenticated, remote attacker to bypass security protections, gain system privileges, and execute elevated commands such as ls, ps, cat, etc., thereby compromising the system. Through this remote execution, in certain cases, exposure of sensitive system data such as certificates, private keys, and other information may be possible.CVE-2021-41823kemptechnologiesweb_application_firewallEPSS score0.50%
The Web Application Firewall (WAF) in Kemp LoadMaster 7.2.54.1 allows certain uses of onmouseover to bypass an XSS protection mechanism.CVE-2014-5288kemptechnologiesload_masterEPSS score1.57%
A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages.CVE-2017-15524kemptechnologiesweb_application_firewallEPSS score1.22%
The Application Firewall Pack (AFP, aka Web Application Firewall) component on Kemp Load Balancer devices with software before 7.2.40.1 allows a Security Feature Bypass via an HTTP POST request.CVE-2024-7591kemptechnologiesloadmaster+2EPSS score43.81%
Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects:
* LoadMaster: 7.2.40.0 and above
* ECS: All versions
* Multi-Tenancy: 7.1.35.4 and above