VulnSea

EIBIZ Co.,Ltd. has 4 CVEs on record. The busiest recent month was December 2025 with 4. The median CVSS is 9.0 (critical), with 2 rated critical.

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
9.0
Publish → KEV
—
Last 90 days
0 prev 0

Products

  • i-Media Server Digital Signage 4
4
Total CVEs
2
Critical
0
CISA KEV
0
Exploited

EIBIZ Co.,Ltd. vulnerabilities

CVEs affecting EIBIZ Co.,Ltd., newest first. Open any entry for full detail, references, and exploit status.

4 CVEsRSS

CVE-2020-36893High· 8.7PoC
9mo ago

Eibiz i-Media Server Digital Signage 3.8.0 Directory Traversal Vulnerability

Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remote attackers to access files outside the server's root directory. Attackers can exploit the 'oldfile' GET parameter t…

▾ MidnightEIBIZ Co.,Ltd. · i-Media Server Digital SignageEPSS 1.6%via CVEORG
CVE-2020-36894Critical· 9.3PoC
9mo ago

Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated User Creation Vulnerability

Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through AMF-encoded object manipulation. Attackers can send crafted serialized objects…

▾ AbyssalEIBIZ Co.,Ltd. · i-Media Server Digital SignageEPSS 0.80%via CVEORG
CVE-2020-36892Critical· 9.3PoC
9mo ago

Eibiz i-Media Server Digital Signage 3.8.0 Unauthenticated Privilege Escalation

Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to eleva…

▾ AbyssalEIBIZ Co.,Ltd. · i-Media Server Digital SignageEPSS 1.1%via CVEORG
CVE-2020-36895High· 8.7PoC
9mo ago

EIBIZ i-Media Server Digital Signage 3.8.0 Unauthenticated Configuration Disclosure

EIBIZ i-Media Server Digital Signage 3.8.0 contains an unauthenticated configuration disclosure vulnerability that allows remote attackers to access sensitive configuration files via direct object reference. Attackers can retrieve the Si…

▾ MidnightEIBIZ Co.,Ltd. · i-Media Server Digital SignageEPSS 0.73%via CVEORG
EIBIZ Co.,Ltd. vulnerabilities (CVEs) · VulnSea