1 |
Remote Code Execution in XProtect Management Server |
XProtect Management Server for versions 2020 R2 (20.2) - 2023 R1 (23.1) |
May 9, 2023 |
Read more |
2 |
Remote Code Execution in XProtect Event Server |
XProtect Event Server for versions 2020 R2 (20.2) - 2023 R1 (23.1) |
May 9, 2023 |
Read more |
3 |
Milestone Mobile Server authentication bypass vulnerability |
XProtect Mobile Server 2022 R2, XProtect Mobile Server 2022 R3 |
October 21 2022 |
Read more |
4 |
Missing encryption between Identity Server and SQL server |
XProtect VMS 2022 R1 |
June 9 2022 |
Read more |
5 |
Information about Spring4Shell (CVE-2022-22965) |
- |
April 4 2022 |
Read more |
6 |
Important update to the XProtect VMS Products Administrator manual — Management Server permissions |
- |
March 24 2022 |
Read more |
7 |
Log4J vulnerability (FAQ) |
- |
February 21 2022 |
Read more |
8 |
Arbitrary file access on the DLNA Server |
XProtect DLNA Server 2019 R1 – 2021 R1 |
November 9 2021 |
Read more |
9 |
Milestone Open Network Bridge (ONVIF) security vulnerability |
Supported versions of XProtect Open Network Bridge (2018 R2 - 2020 R3) |
April 13 2021 |
Read more |
10 |
XProtect Smart Client - username on HTTP port 80 |
XProtect Smart Client 2020 R2 (20.2a) or older |
August 10 2020 |
Read more |
11 |
Customer Dashboard discontinues support for legacy SSL/TLS protocols |
XProtect Corporate, Expert, Enterprise, Professional, Express, Essential, Go, 2016. Milestone Husky M10 (Arcus 1.0), M30 S, M50 S, M50 Advanced, M500 Advanced 2016 |
July 10 2020 |
Read more |
12 |
XProtect Smart Client execution vulnerability |
XProtect Smart Client |
October 11 2019 |
Read More |
13 |
XProtect Configuration API security vulnerability and mitigation |
XProtect Corporate, Expert, Professional+, Express+, Essential+ versions 2016 R1 (10.0a) - 2019 R1 (13.1a) |
March 22 2019 |
Read More |
14 |
.NET Framework Remoting Potential Security Vulnerability |
XProtect Corporate, Expert, Professional+, Express+, Essential+ |
April 25 2018 |
Read More |
15 |
Unsupported MSXML version in XProtect VMS |
All |
Jan 16 2018 |
Read more |
16 |
Meltdown and Spectre attacks |
All operating systems |
Jan 5 2018 |
Read more |
17 |
CCleaner 5.33 Malware |
Windows operating system |
Sep 20 2017 |
Read more |
18 |
How to identify and remove default XProtect Basic User account |
XProtect® Express 2017 R1 (11.1a) and prior versions, XProtect® Essential 2.0 2017 R1 |
Aug 29 2017 |
Read more |
19 |
Husky M10 privilege escalation issue |
Milestone Husky M10 |
Aug 21 2017 |
Read more |
20 |
ONVIF potential security vulnerability |
Genivia gSOAP Toolkit versions 2.7 to 2.8.47 |
Jul 7 2017 |
Read more |