Mesalvo Vulnerabilities and Affected Products

Open in search

Vulnerabilities associated with Meona Server Component.

Products

Clear product

Showing 5 vulnerabilities on this page for Meona Server Component

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Potential Insufficient Data Authenticity Verification in Mesalvo Meona Client Launcher and Server Components

Insufficient Verification of Data Authenticity vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component makes it possible to send messages to any email address. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

CWE-345May 20, 2026
CVSS4.4v3.1EPSS0.089%PoCs0SignalsSTIX

Mesalvo Meona Cleartext Storage of Sensitive Information in Memory

Cleartext Storage of Sensitive Information in Memory vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

CWE-316May 20, 2026
CVSS6.0v3.1EPSS0.101%PoCs0SignalsSTIX

Mesalvo Meona Incorrect Privilege Assignment Enables Cleartext Password Export via SQL Editor

Incorrect Privilege Assignment vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables the export  of user data, including cleartext passwords, via the SQL editor. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

CWE-266May 20, 2026
CVSS7.2v3.1EPSS0.349%PoCs0SignalsSTIX

Mesalvo Meona Improper Access Control Leading to Admin Panel Access

Improper Access Control vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables a normal user gaining access to the admin panel. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

CWE-284May 20, 2026
CVSS7.8v3.1EPSS0.126%PoCs0SignalsSTIX

Mesalvo Meona Code Injection Vulnerability

Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona Server Component enables code execution on other users' systems. This issue affects Meona Client Launcher Component: through 19.06.2020 15:11:49; Meona Server Component: through 2025.04 5+323020.

CWE-94May 20, 2026
CVSS9.0v3.1EPSS0.387%PoCs0SignalsSTIX