diskoverdata records

3 published records for vendor diskoverdata.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
22Monitor	CVE-2025-50985No exploit	diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting (XSS) flaws in its web interface.diskoverdata · diskover · CWE-79 pre-auth RCE XSS	Medium5.6	—	0.2%	Aug 27, 2025
22Monitor	CVE-2025-50986No exploit	diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting (XSS) vulnerabilities in its administrative settingsdiskoverdata · diskover · CWE-79 Pre-auth XSS	Medium5.6	—	0.2%	Aug 27, 2025
21Monitor	CVE-2025-50984No exploit	diskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL injection flaws in its Elasticsearch configuration fdiskoverdata · diskover · CWE-89 Pre-auth Auth bypass SQL injection	Medium5.3	—	0.3%	Aug 27, 2025

CVE-2025-50985
22Monitor
diskover-web v2.3.0 Community Edition is vulnerable to multiple reflected cross-site scripting (XSS) flaws in its web interface.
MediumCVSS 5.6No exploitEPSS 0%
- pre-auth RCE
- XSS
diskoverdata · diskoverAug 27, 2025
CVE-2025-50986
22Monitor
diskover-web v2.3.0 Community Edition suffers from multiple stored cross-site scripting (XSS) vulnerabilities in its administrative settings
MediumCVSS 5.6No exploitEPSS 0%
- Pre-auth
- XSS
diskoverdata · diskoverAug 27, 2025
CVE-2025-50984
21Monitor
diskover-web v2.3.0 Community Edition is vulnerable to multiple boolean-based blind SQL injection flaws in its Elasticsearch configuration f
MediumCVSS 5.3No exploitEPSS 0%
diskoverdata · diskoverAug 27, 2025