riskterminator · threatengine.sh

Home/Product/ecoa riskterminator

Product

ecoa riskterminator

13 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

ECOA BAS controller stores sensitive data (backup exports) in clear-text, thus the unauthenticated attacker can remotely query use

ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files using an

ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can access

ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote attackers can obtain

ECOA BAS controller is vulnerable to insecure direct object references that occur when the application provides direct access to o

ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by

ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote password attacks and

ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a forged reques

ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion. Using the specific GET paramete

ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure. Using the specific POST param

ECOA BAS controller suffers from an authentication bypass vulnerability. An unauthenticated attacker through cookie poisoning can

ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unaut

ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthentica

SOC and Response
CVE triage
Stack monitoring
Am I affected
IOC triage
KEV catalog
Daily brief
Change tracking

Detection Engineering
Coverage workspace
Detection coverage
Coverage check
Telemetry ceiling
SIEM query builder
Sigma rules
SIEM rules
YARA rules
Network rules
D3FEND

Threat Hunting
Threat actors
ATT&CK techniques
Attack paths
Indicators
Atomic tests

Red Team and Pentest
Exploitability triage
Recon pack
Attack paths
CAPEC patterns
Adversary emulation

Compliance and GRC
Framework mapping
Control assessment
Audit view
Coverage report

Atlas Search Threat actors Techniques Tools & malware CWE CAPEC KEV catalog Package vulns

About All capabilities Pricing API docs Live status Privacy policy Terms of service

threatengine.sh