Affected Products

Vendor / product matrix with CVE counts sourced from the CPE catalog.

Export CSV

Products

1 vendor
VendorProductsCVEsKEVAvg EPSSWorst Severity
loway
16018.6%HIGH

Related CVEs

6
CVE IDDescriptionSeverityCVSSKEVEPSSPublished
CVE-2024-42343Loway - CWE-204: Observable Response DiscrepancyHIGH7.5—24.8%Sep 8, 2024
CVE-2024-42342Loway - CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')MEDIUM4.3—17.7%Sep 8, 2024
CVE-2024-42341Loway - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')MEDIUM6.1—13.3%Sep 8, 2024
CVE-2020-13127A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.04.1 allows remote authenticated attackers to execute arbitrary SQL commands via the TASKS_LIST__pt.querystring parameter.HIGH8.8——Sep 9, 2020
CVE-2020-15947A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId parameter.HIGH8.8——Aug 13, 2020
CVE-2020-15925A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPF_XPAR1 parameter.HIGH8.8——Aug 13, 2020