ikus-soft rdiffweb

Name: ikus-soft rdiffweb
Brand: ikus-soft

productUS

cpe:2.3:a:ikus-soft:rdiffweb:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

11critical13high16medium2low

updated 2026-10-26

vulnerabilities (42)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-3272US	high7.5	1.77% (78th)	—	2.4.8	2022-09-26	< 2.4.8
CVE-2022-3389US	high7.5	1.40% (72nd)	—	2.4.10	2022-10-06	< 2.4.10
CVE-2022-3371US	high7.5	1.34% (71st)	—	no fix	2022-09-30	2 versions
CVE-2022-4722US	high7.2	1.21% (68th)	—	2.5.5	2022-12-27	< 2.5.5
CVE-2022-3364US	high7.5	1.18% (67th)	—	no fix	2022-09-29	2 versions
CVE-2022-3167US	high8.8	1.17% (67th)	—	2.4.1	2022-09-08	< 2.4.1
CVE-2022-3298US	high7.5	1.16% (67th)	—	2.4.8	2022-09-26	< 2.4.8
CVE-2022-3295US	high7.5	1.16% (67th)	—	2.4.8	2022-09-26	< 2.4.8
CVE-2022-4719US	critical9.8	1.04% (64th)	—	2.5.5	2022-12-27	< 2.5.5
CVE-2022-3363US	critical9.8	1.01% (63rd)	—	2.5.0	2022-10-26	2 versions
CVE-2022-3327US	critical9.8OT elevated	1.00% (63rd)	—	2.4.10	2022-10-20	3 versions
CVE-2022-3179US	high8.8	0.98% (62nd)	—	2.4.2	2022-09-13	< 2.4.2
CVE-2022-3362US	critical9.8	0.96% (61st)	—	2.5.0	2022-11-14	< 2.5.0
CVE-2022-3269US	critical9.8	0.92% (60th)	—	2.4.7	2022-09-23	< 2.4.7
CVE-2022-3290US	high7.5	0.89% (59th)	—	2.4.8	2022-09-26	< 2.4.8
CVE-2022-4018US	medium4.3OT elevated	0.89% (59th)	—	no fix	2022-11-16	2 versions
CVE-2022-4724US	critical9.8	0.88% (59th)	—	2.5.5	2022-12-27	< 2.5.5
CVE-2022-3175US	medium5.3	0.87% (58th)	—	2.4.2	2022-09-13	< 2.4.2
CVE-2022-4314US	critical9.8	0.85% (58th)	—	2.5.2	2022-12-12	< 2.5.2
CVE-2022-3376US	medium5.3	0.85% (58th)	—	no fix	2022-10-06	2 versions
CVE-2022-3439US	critical9.8	0.83% (57th)	—	2.5.0	2022-10-14	< 2.5.0
CVE-2023-5289US	high8.8	0.78% (55th)	—	2.8.4	2023-09-29	< 2.8.4
CVE-2022-3221US	high8.8	0.76% (55th)	—	2.4.3	2022-09-15	< 2.4.3
CVE-2022-3326US	medium4.3	0.71% (53rd)	—	2.4.9	2022-09-29	< 2.4.9
CVE-2022-3174US	high7.5OT elevated	0.71% (53rd)	—	2.4.2	2022-09-13	< 2.4.2
CVE-2022-3301US	low2.4	0.69% (52nd)	—	2.4.8	2022-09-26	< 2.4.8
CVE-2022-3438US	medium6.1	0.68% (52nd)	—	2.5.0	2022-10-10	2 versions
CVE-2022-4723US	medium6.5	0.67% (52nd)	—	2.5.5	2022-12-27	< 2.5.5
CVE-2022-4644US	medium6.1	0.64% (50th)	—	2.5.4	2022-12-22	< 2.5.4
CVE-2022-3273US	critical9.8	0.57% (46th)	—	no fix	2022-10-06	2 versions
CVE-2022-3292US	medium4.6	0.57% (46th)	—	2.4.8	2022-09-28	< 2.4.8
CVE-2022-3250US	medium5.3OT elevated	0.55% (45th)	—	2.4.6	2022-09-21	< 2.4.6
CVE-2022-4721US	medium5.4	0.52% (43rd)	—	2.5.5	2022-12-27	< 2.5.5
CVE-2022-4720US	medium6.1	0.51% (43rd)	—	2.5.5	2022-12-27	< 2.5.5
CVE-2022-3274US	low3.5	0.50% (42nd)	—	2.4.7	2022-09-22	< 2.4.7
CVE-2023-4138US	medium6.5	0.45% (38th)	—	2.8.0	2023-08-03	< 2.8.0
CVE-2022-3457US	critical9.8	0.44% (37th)	—	2.5.0	2022-10-13	2 versions
CVE-2022-3456US	critical9.8	0.41% (34th)	—	2.5.0	2022-10-13	< 2.5.0
CVE-2022-3232US	medium4.3	0.40% (33rd)	—	2.4.5	2022-09-17	< 2.4.5
CVE-2022-3267US	medium4.3	0.39% (32nd)	—	2.4.6	2022-09-22	< 2.4.6
CVE-2022-3233US	medium4.3	0.39% (32nd)	—	2.4.6	2022-09-21	2 versions
CVE-2022-4646US	medium6.5	0.34% (27th)	—	2.5.4	2022-12-22	< 2.5.4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-770Allocation of Resources Without Limits or Throttling10 CVEs
CWE-352Cross-Site Request Forgery (CSRF)6 CVEs
CWE-521Weak Password Requirements3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')3 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency2 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-311Missing Encryption of Sensitive Data2 CVEs
CWE-614Sensitive Cookie in HTTPS Session Without 'Secure' Attribute2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE42 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan