spaceapplications

Top products

The 14 most recently published vulnerabilities affecting spaceapplications.

• CVE-2026-55548Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets4.3Jul 16, 2026
• CVE-2026-46621Yamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection9.1Jul 16, 2026
• CVE-2026-46562Yamcs: Remote Code Execution via Mission Database algorithm override9.8Jul 16, 2026
• CVE-2026-44632Yamcs: Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`9.1Jul 16, 2026
• CVE-2026-44596Yamcs: No Rate Limiting on Authentication Endpoint6.5Jul 16, 2026
• CVE-2026-44595Yamcs: Unauthorized user enumeration via IAM API endpoints4.3Jul 16, 2026
• CVE-2023-46470Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser.5.4Nov 20, 2023
• CVE-2023-46471Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer.5.4Nov 20, 2023
• CVE-2023-47311An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking.6.1Nov 20, 2023
• CVE-2023-45278Directory Traversal vulnerability in the storage functionality of the API in Yamcs 5.8.6 allows attackers to delete arbitrary files via crafted HTTP DELETE request.9.1Oct 19, 2023
• CVE-2023-45281An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file.6.1Oct 19, 2023
• CVE-2023-45280Yamcs 5.8.6 allows XSS (issue 2 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload an HTML file containing arbitrary J...5.4Oct 19, 2023
• CVE-2023-45279Yamcs 5.8.6 allows XSS (issue 1 of 2). It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload a display referencing a malicious J...5.4Oct 19, 2023
• CVE-2023-45277Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2). The vulnerability is in the storage functionality of the API and allows one to escape the base directory of the buckets, freely navi...7.5Oct 19, 2023