Home/Product/zauner arc
Product

zauner arc

10 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2025-40896
< 2.2.0
The server certificate was not verified when an Arc agent connected to a Guardian or CMC. A malicious actor could perform a man
6.5MEDIUM
CVE-2024-52928
< 1.26.1
Arc before 1.26.1 on Windows has a bypass issue in the site settings that allows websites (with previously granted permissions) to
9.6CRITICAL
CVE-2023-24243
< 22.0.8473
CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).
7.5HIGH
CVE-2021-45893
all versions
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Improper Handling of Case Sensitivity, which makes password
7.5HIGH
CVE-2021-45892
all versions
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is storage of Passwords in a Recoverable Format.
5.9MEDIUM
CVE-2021-45891
all versions
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4., that allows attackers to escalate privileges within the application,
8.8HIGH
CVE-2021-45894
all versions
An issue was discovered in Softwarebuero Zauner ARC 4.2.0.4. There is Cleartext Transmission of Sensitive Information.
5.9MEDIUM
CVE-2015-9275
all versions
ARC 5.21q allows directory traversal via a full pathname in an archive file.
5.3MEDIUM
CVE-2005-2992
<= 5.21j
arc 5.21j and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different type of
CVE-2005-2945
<= 5.21j
arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive informati
threatengine.sh