Skip to main content

Vulnerability Disclosure

Vulnerabilities discovered and disclosed by Aura Information Security.
CVE(s) Publish Date Vendor & Product Affected Versions
CVE-2023–31046 14 August 2023 Papercut - Papercut MF/NG < 22.1.1
CVE-2023-35803 12 July 2023 Extreme Networks IQ Engine/Aerohive HiveOS < 10.6r2
CVE-2022-43769, CVE-2022-43939, CVE-2022-43773, CVE-2022-43938 4 April 2023 Hitachi Vantara - Pentaho Business Analytics Server 9.4.0.1 and 9.3.0.2, including 8.3.x
CVE-2019-8074 24 September 2019 Adobe - ColdFusion < 2018 Update 4 and < 2016 Update 11
CVE-2017-5965, CVE-2017-5966 19 May 2017 Sitecore - Sitecore 8.1 Rev 151207
CVE-2017-4897 10 March 2017 VMware - Horizon Daas Platform 6.1.x
CVE-2017-5219, CVE-2017-5218 24 January 2017 Sage - SageCRM 7.0.e and later

Aura’s vulnerability disclosure policy can be found here.