Threats affecting pkg:maven/microchip/time-provider-4100

4 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.5	EPSS 0.3%	CVE-2025-9497Microchip Time Provider 4100 · Use of Hard-coded Credentials Medium5.5EPSS 0.3%2026-03-28CVE Database V5CVE-2025-9497 Use of Hard-coded Credentials vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5.0. EPSS 0.3%Vulnerability CWE-798	CVE Database V5	2026-03-28
Medium	5.7	EPSS <0.1%	CVE-2025-47904Microchip Time Provider 4100 · Download of Code Without Integrity Check Medium5.7EPSS <0.1%2026-02-24CVE Database V5CVE-2025-47904 Download of Code Without Integrity Check vulnerability in Microchip Time Provider 4100 allows Malicious Manual Software Update.This issue affects Time Provider 4100: before 2.5. EPSS <0.1%Vulnerability CWE-494	CVE Database V5	2026-02-24
High	7.1	EPSS 0.4%	CVE-2025-47902Microchip Time Provider 4100 · SQL Injection High7.1EPSS 0.4%2025-10-20CVE Database V5CVE-2025-47902 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Microchip Time Provider 4100 allows SQL Injection.This issue affects Time Provider 4100: before 2.5. EPSS 0.4%Vulnerability CWE-89	CVE Database V5	2025-10-20
High	8.9	EPSS 1.4%	CVE-2025-47901Microchip Time Provider 4100 · OS Command Injection High8.9EPSS 1.4%2025-10-20CVE Database V5CVE-2025-47901 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Microchip Time Provider 4100 allows OS Command Injection.This issue affects Time Provider 4100: before 2.5. EPSS 1.4%Vulnerability CWE-78	CVE Database V5	2025-10-20

Page 1 of 1