What’s Vulnerable › Products

Navarino Infinity vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Navarino Infinity version is affected

Latest Navarino Infinity vulnerabilities

• CVE-2018-5386 — Some Navarino Infinity functions placed in the URL can bypass any authentication mechanism leading to an information leak (CVSS 7.5)
• CVE-2018-5385 — Navarino Infinity web interface up to version 2.2 is prone to session fixation attacks (CVSS 8.8)
• CVE-2018-5384 — Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection (CVSS 9.8)