answer records

34 published records for vendor answer.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

34 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2023-0744Proof of concept	Improper Access Control in answerdev/answeranswer · answer · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	6.4%	Feb 8, 2023
39Monitor	CVE-2023-1537No exploit	Authentication Bypass by Capture-replay in answerdev/answeranswer · answer · CWE-294 Pre-auth Auth bypass	Critical9.8	—	0.8%	Mar 21, 2023
36Monitor	CVE-2023-0742No exploit	Cross-site Scripting (XSS) - Stored in answerdev/answeranswer · answer · CWE-79 XSS	Critical9.0	—	0.9%	Feb 8, 2023
36Monitor	CVE-2023-0741No exploit	Cross-site Scripting (XSS) - DOM in answerdev/answeranswer · answer · CWE-79 XSS	Critical9.0	—	0.9%	Feb 8, 2023
36Monitor	CVE-2023-0743No exploit	Cross-site Scripting (XSS) - Generic in answerdev/answeranswer · answer · CWE-79 XSS	Critical9.0	—	0.7%	Feb 8, 2023
36Monitor	CVE-2023-0740No exploit	Cross-site Scripting (XSS) - Stored in answerdev/answeranswer · answer · CWE-79 XSS	Critical9.0	—	0.7%	Feb 8, 2023
35Monitor	CVE-2023-4125No exploit	Weak Password Requirements in answerdev/answeranswer · answer · CWE-521	High8.8	—	0.9%	Aug 3, 2023
35Monitor	CVE-2023-4815No exploit	Missing Authentication for Critical Function in answerdev/answeranswer · answer · CWE-306 Auth bypass	High8.8	—	0.8%	Sep 7, 2023
35Monitor	CVE-2023-1543No exploit	Insufficient Session Expiration in answerdev/answeranswer · answer · CWE-613 Pre-auth	High8.8	—	0.8%	Mar 21, 2023
35Monitor	CVE-2023-1976No exploit	Password Aging with Long Expiration in answerdev/answeranswer · answer · CWE-263 Pre-auth	High8.8	—	0.6%	Apr 11, 2023
35Monitor	CVE-2023-4126No exploit	Insufficient Session Expiration in answerdev/answeranswer · answer · CWE-613	High8.8	—	0.6%	Aug 3, 2023
27Monitor	CVE-2023-0739No exploit	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answeranswer · answer · CWE-362 Race condition	Medium6.8	—	0.7%	Feb 8, 2023
26Monitor	CVE-2023-4124No exploit	Missing Authorization in answerdev/answeranswer · answer · CWE-862 Broken access control (IDOR)	Medium6.5	—	0.7%	Aug 3, 2023
26Monitor	CVE-2023-1974No exploit	Exposure of Sensitive Information Through Metadata in answerdev/answeranswer · answer · CWE-1230 Pre-auth	Medium6.5	—	0.6%	Apr 11, 2023
26Monitor	CVE-2023-1975No exploit	Insertion of Sensitive Information Into Sent Data in answerdev/answeranswer · answer · CWE-201 Pre-auth	Medium6.5	—	0.6%	Apr 11, 2023
23Monitor	CVE-2023-4127No exploit	Race Condition within a Thread in answerdev/answeranswer · answer · CWE-366 Pre-auth Race condition	Medium5.9	—	0.5%	Aug 3, 2023
21Monitor	CVE-2023-1542No exploit	Business Logic Errors in answerdev/answeranswer · answer · CWE-840	Medium5.4	—	0.8%	Mar 21, 2023
21Monitor	CVE-2023-1538No exploit	Observable Timing Discrepancy in answerdev/answeranswer · answer · CWE-208 Pre-auth	Medium5.3	—	0.6%	Mar 21, 2023
21Monitor	CVE-2023-1540No exploit	Observable Response Discrepancy in answerdev/answeranswer · answer · CWE-204 Pre-auth	Medium5.3	—	0.6%	Mar 21, 2023
21Monitor	CVE-2023-1242No exploit	Cross-site Scripting (XSS) - Stored in answerdev/answeranswer · answer · CWE-79 XSS	Medium5.4	—	0.6%	Mar 7, 2023
21Monitor	CVE-2023-1241No exploit	Cross-site Scripting (XSS) - Stored in answerdev/answeranswer · answer · CWE-79 XSS	Medium5.4	—	0.6%	Mar 7, 2023
21Monitor	CVE-2023-1240No exploit	Cross-site Scripting (XSS) - Stored in answerdev/answeranswer · answer · CWE-79 XSS	Medium5.4	—	0.6%	Mar 7, 2023
21Monitor	CVE-2023-1539No exploit	Improper Restriction of Excessive Authentication Attempts in answerdev/answeranswer · answer · CWE-307 Pre-auth	Medium5.3	—	0.6%	Mar 21, 2023
21Monitor	CVE-2023-1238No exploit	Cross-site Scripting (XSS) - Stored in answerdev/answeranswer · answer · CWE-79 XSS	Medium5.4	—	0.6%	Mar 7, 2023
21Monitor	CVE-2023-1535No exploit	Cross-site Scripting (XSS) - Stored in answerdev/answeranswer · answer · CWE-79 XSS	Medium5.4	—	0.5%	Mar 21, 2023

CVE-2023-0744
41Plan
Improper Access Control in answerdev/answer
CriticalCVSS 9.8Proof of conceptEPSS 6%
- Pre-auth
- Broken access control (IDOR)
answer · answerFeb 8, 2023
CVE-2023-1537
39Monitor
Authentication Bypass by Capture-replay in answerdev/answer
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
answer · answerMar 21, 2023
CVE-2023-0742
36Monitor
Cross-site Scripting (XSS) - Stored in answerdev/answer
CriticalCVSS 9.0No exploitEPSS 1%
- XSS
answer · answerFeb 8, 2023
CVE-2023-0741
36Monitor
Cross-site Scripting (XSS) - DOM in answerdev/answer
CriticalCVSS 9.0No exploitEPSS 1%
- XSS
answer · answerFeb 8, 2023
CVE-2023-0743
36Monitor
Cross-site Scripting (XSS) - Generic in answerdev/answer
CriticalCVSS 9.0No exploitEPSS 1%
- XSS
answer · answerFeb 8, 2023
CVE-2023-0740
36Monitor
Cross-site Scripting (XSS) - Stored in answerdev/answer
CriticalCVSS 9.0No exploitEPSS 1%
- XSS
answer · answerFeb 8, 2023
CVE-2023-4125
35Monitor
Weak Password Requirements in answerdev/answer
HighCVSS 8.8No exploitEPSS 1%
answer · answerAug 3, 2023
CVE-2023-4815
35Monitor
Missing Authentication for Critical Function in answerdev/answer
HighCVSS 8.8No exploitEPSS 1%
- Auth bypass
answer · answerSep 7, 2023
CVE-2023-1543
35Monitor
Insufficient Session Expiration in answerdev/answer
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
answer · answerMar 21, 2023
CVE-2023-1976
35Monitor
Password Aging with Long Expiration in answerdev/answer
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
answer · answerApr 11, 2023
CVE-2023-4126
35Monitor
Insufficient Session Expiration in answerdev/answer
HighCVSS 8.8No exploitEPSS 1%
answer · answerAug 3, 2023
CVE-2023-0739
27Monitor
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answer
MediumCVSS 6.8No exploitEPSS 1%
- Race condition
answer · answerFeb 8, 2023
CVE-2023-4124
26Monitor
Missing Authorization in answerdev/answer
MediumCVSS 6.5No exploitEPSS 1%
- Broken access control (IDOR)
answer · answerAug 3, 2023
CVE-2023-1974
26Monitor
Exposure of Sensitive Information Through Metadata in answerdev/answer
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
answer · answerApr 11, 2023
CVE-2023-1975
26Monitor
Insertion of Sensitive Information Into Sent Data in answerdev/answer
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
answer · answerApr 11, 2023
CVE-2023-4127
23Monitor
Race Condition within a Thread in answerdev/answer
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
- Race condition
answer · answerAug 3, 2023
CVE-2023-1542
21Monitor
Business Logic Errors in answerdev/answer
MediumCVSS 5.4No exploitEPSS 1%
answer · answerMar 21, 2023
CVE-2023-1538
21Monitor
Observable Timing Discrepancy in answerdev/answer
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
answer · answerMar 21, 2023
CVE-2023-1540
21Monitor
Observable Response Discrepancy in answerdev/answer
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
answer · answerMar 21, 2023
CVE-2023-1242
21Monitor
Cross-site Scripting (XSS) - Stored in answerdev/answer
MediumCVSS 5.4No exploitEPSS 1%
- XSS
answer · answerMar 7, 2023
CVE-2023-1241
21Monitor
Cross-site Scripting (XSS) - Stored in answerdev/answer
MediumCVSS 5.4No exploitEPSS 1%
- XSS
answer · answerMar 7, 2023
CVE-2023-1240
21Monitor
Cross-site Scripting (XSS) - Stored in answerdev/answer
MediumCVSS 5.4No exploitEPSS 1%
- XSS
answer · answerMar 7, 2023
CVE-2023-1539
21Monitor
Improper Restriction of Excessive Authentication Attempts in answerdev/answer
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
answer · answerMar 21, 2023
CVE-2023-1238
21Monitor
Cross-site Scripting (XSS) - Stored in answerdev/answer
MediumCVSS 5.4No exploitEPSS 1%
- XSS
answer · answerMar 7, 2023
CVE-2023-1535
21Monitor
Cross-site Scripting (XSS) - Stored in answerdev/answer
MediumCVSS 5.4No exploitEPSS 1%
- XSS
answer · answerMar 21, 2023