MB Connect Line mbCONNECT24

• CVE-2024-23943 Critical 9.1 MB connect line: Cloud API access due to a lack of authentication for a critical function 0.6%
• CVE-2024-23942 High 7.1 MB connect line: Configuration File on the client workstation is not encrypted 0.1%
• CVE-2024-45273 High 8.4 MB connect line/Helmholz: Weak encryption of configuration file <0.1%
• CVE-2024-45272 High 7.5 MB connect line/Helmholz: Generation of weak passwords vulnerability 0.6%
• CVE-2023-1779 Medium 4.3 Helmholz and MB Connect Line: Account takeover via password reset in multiple products 0.5%
• CVE-2023-0985 High 8.8 Helmholz and MB Connect Line: Account takeover via password reset in multiple products 0.8%
• CVE-2022-22520 Medium 5.3 User enumeration vulnerability in MB connect line and Helmholz products 1.0%
• CVE-2021-34580 High 7.5 Remote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0 1.0%
• CVE-2021-34575 High 7.5 Information Exposure in mymbCONNECT24, mbCONNECT24 <= 2.8.0 1.0%
• CVE-2021-34574 Medium 4.3 Password policy evasion in products of MB connect line and Helmholz 0.7%
• CVE-2020-12530 Medium 4.3 An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There is an XSS issue in the redirect.php allowing an attacker to inject code via a ge 0.6%
• CVE-2020-12529 Medium 5.8 An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to scan for open ports. 0.8%
• CVE-2020-12528 Medium 6.5 An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in t 0.9%
• CVE-2020-12527 Medium 6.5 Improper Access Validation in products of MB connect line and Helmholz 1.0%