Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

halvotec CVEs

Beta · best-effort

5 CVEs tagged to vendor halvotec — 0 Critical, 2 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2019-19613

Published Mar 16, 2020

An issue was discovered in Halvotec RaQuest 10.23.10801.0. The login page of the admin application is vulnerable to an Open Redirect attack allowing an attacker to redirect a user…

CVSS 5.2 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-19612

Published Mar 16, 2020

An issue was discovered in Halvotec RaQuest 10.23.10801.0. Several features of the application allow stored Cross-site Scripting (XSS). Fixed in Release 24.2020.20608.0.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-19610

Published Mar 16, 2020

An issue was discovered in Halvotec RaQuest 10.23.10801.0. It allows session fixation. Fixed in Release 24.2020.20608.0.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-19611

Published Mar 13, 2020

An issue was discovered in Halvotec RaQuest 10.23.10801.0. One of the exposed web services allows an anonymous user to access the list of connected users as well as the session co…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2019-19614

Published Mar 9, 2020

An issue was discovered in Halvotec RAQuest 10.23.10801.0. The login page is vulnerable to wildcard injection, allowing an attacker to enumerate the list of users sharing an ident…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1