[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAUzfrLbtvC0fSQ5bSbO8lbPEv5dm5GGJ0vGg329tY5k":3,"g5a-ex:stormshield\u002Fendpoint_security@*":127,"g5a-family:stormshield\u002Fendpoint_security":129},{"success":4,"data":5},true,{"product":6,"versions":37,"topVulnerabilitiesByEpss":48,"kevVulnerabilities":104,"seoMetadata":105,"meta":124},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":36},"stormshield","endpoint_security",10,15,0,"2023-06-27",[14,17,19,22,24,26,28,30,32,34],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.2",{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},"2.1.0",1,{"version":23,"cve_count":21,"kev_count":11,"has_kev":16},"2.1.1",{"version":25,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0",{"version":27,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.2",{"version":29,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.1",{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.2",{"version":33,"cve_count":11,"kev_count":11,"has_kev":16},"7.2.39",{"version":35,"cve_count":11,"kev_count":11,"has_kev":16},"7.2.40","Endpoint Security by Stormshield is a technology product with 10 tracked versions and 15 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[38,39,40,41,42,43,44,45,46,47],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":21,"kev_count":11,"has_kev":16},{"version":23,"cve_count":21,"kev_count":11,"has_kev":16},{"version":25,"cve_count":11,"kev_count":11,"has_kev":16},{"version":27,"cve_count":11,"kev_count":11,"has_kev":16},{"version":29,"cve_count":11,"kev_count":11,"has_kev":16},{"version":31,"cve_count":11,"kev_count":11,"has_kev":16},{"version":33,"cve_count":11,"kev_count":11,"has_kev":16},{"version":35,"cve_count":11,"kev_count":11,"has_kev":16},[49,57,64,70,75,79,83,88,92,98],{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":16,"epssScore":56},"CVE-2022-4304","A timing based side channel exists in the OpenSSL RSA Decryption implementation\nwhich could be sufficient to recover a plaintext across a network in a\nBleichenbacher style attack. To achieve a successful decryption an attacker\nwould have to be able to send a very large number of trial messages for\ndecryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5,\nRSA-OEAP and RSASVE.\n\nFor example, in a TLS connection, RSA is commonly used by a client to send an\nencrypted pre-master secret to the server. An attacker that had observed a\ngenuine connection between a client and a server could use this flaw to send\ntrial messages to the server and record the time taken to process them. After a\nsufficiently large number of messages the attacker could recover the pre-master\nsecret used for the original connection and thus be able to decrypt the\napplication data sent over that connection.","2023-02-08",5.9,"v3.1","Medium",0.23509,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":54,"severity":62,"isKev":16,"epssScore":63},"CVE-2021-45090","Stormshield Endpoint Security before 2.1.2 allows remote code execution.","2021-12-21",9.8,"Critical",0.03024,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":54,"severity":55,"isKev":16,"epssScore":69},"CVE-2021-31223","SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed.","2021-07-13",5.7,0.00607,{"cveId":71,"description":72,"publishedDate":60,"cvssScore":73,"cvssVersion":54,"severity":55,"isKev":16,"epssScore":74},"CVE-2021-45091","Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control.",4.3,0.00572,{"cveId":76,"description":77,"publishedDate":67,"cvssScore":68,"cvssVersion":54,"severity":55,"isKev":16,"epssScore":78},"CVE-2021-31221","SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed.",0.00487,{"cveId":80,"description":81,"publishedDate":67,"cvssScore":68,"cvssVersion":54,"severity":55,"isKev":16,"epssScore":82},"CVE-2021-31222","SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed.",0.00459,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":73,"cvssVersion":54,"severity":55,"isKev":16,"epssScore":87},"CVE-2023-23562","Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters.","2023-05-31",0.00407,{"cveId":89,"description":90,"publishedDate":12,"cvssScore":73,"cvssVersion":54,"severity":55,"isKev":16,"epssScore":91},"CVE-2023-35800","Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to administrators.",0.00385,{"cveId":93,"description":94,"publishedDate":67,"cvssScore":95,"cvssVersion":54,"severity":96,"isKev":16,"epssScore":97},"CVE-2021-31225","SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed.",7.3,"High",0.00333,{"cveId":99,"description":100,"publishedDate":67,"cvssScore":101,"cvssVersion":54,"severity":102,"isKev":16,"epssScore":103},"CVE-2021-31224","SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies.",3.5,"Low",0.00329,[],{"title":106,"metaDescription":107,"keywords":108,"structuredData":109},"Endpoint Security by Stormshield - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Endpoint Security by Stormshield covering 10 versions with 15 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Endpoint Security vulnerabilities, Endpoint Security security, Endpoint Security CVE, Stormshield Endpoint Security, Endpoint Security threat intelligence, Stormshield security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":110,"@type":111,"name":112,"description":107,"url":113,"manufacturer":114,"applicationCategory":118,"softwareVersion":119,"mainEntity":120},"https:\u002F\u002Fschema.org","SoftwareApplication","Endpoint Security","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fstormshield\u002Fendpoint_security",{"@type":115,"name":116,"url":117},"Organization","Stormshield","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fstormshield","Security Software","10 versions tracked",{"@type":121,"name":122,"description":123,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Endpoint Security Security Vulnerabilities","Security vulnerabilities affecting Endpoint Security by Stormshield",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":125,"apiVersion":126},"2026-10-17T13:28:05.609Z","3.0",{"rows":128,"total":11,"capped":16,"failed":11},[],[]]