EIBIZ Co.,Ltd. has 4 CVEs on record. The busiest recent month was December 2025 with 4. The median CVSS is 9.0 (critical), with 2 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.0
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Worst active — by depth score
CVE-2020-36894Critical· 9.3Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated User Creation Vulnerability63CVE-2020-36892Critical· 9.3Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated Privilege Escalation63CVE-2020-36895High· 8.7EIBIZ i-Media Server Digital Signage 3.8.0 Unauthenticated Configuration Disclosure60CVE-2020-36893High· 8.7Eibiz i-Media Server Digital Signage 3.8.0 Directory Traversal Vulnerability60
EIBIZ Co.,Ltd. vulnerabilities
CVEs affecting EIBIZ Co.,Ltd., newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2020-36893High· 8.7PoCEibiz i-Media Server Digital Signage 3.8.0 Directory Traversal Vulnerability
Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remote attackers to access files outside the server's root directory. Attackers can exploit the 'oldfile' GET parameter t…
CVE-2020-36894Critical· 9.3PoCEibiz i-Media Server Digital Signage 3.8.0 Unauthenticated User Creation Vulnerability
Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through AMF-encoded object manipulation. Attackers can send crafted serialized objects…
CVE-2020-36892Critical· 9.3PoCEibiz i-Media Server Digital Signage 3.8.0 Unauthenticated Privilege Escalation
Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to eleva…
CVE-2020-36895High· 8.7PoCEIBIZ i-Media Server Digital Signage 3.8.0 Unauthenticated Configuration Disclosure
EIBIZ i-Media Server Digital Signage 3.8.0 contains an unauthenticated configuration disclosure vulnerability that allows remote attackers to access sensitive configuration files via direct object reference. Attackers can retrieve the Si…