Skip to content
Noroxi

avolvesoftware records

4 published records for vendor avolvesoftware.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2014-5130
    27Monitor

    Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a di

    MediumCVSS 6.5No exploitEPSS 3%

    avolvesoftware · projectdoxMar 27, 2018

  • CVE-2014-5131
    27Monitor

    Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse

    MediumCVSS 6.5No exploitEPSS 3%

    avolvesoftware · projectdoxMar 27, 2018

  • CVE-2014-5129
    18Monitor

    Cross-site scripting (XSS) vulnerability in Avolve Software ProjectDox 8.1 allows remote attackers to inject arbitrary web script or HTML vi

    MediumCVSS 4.3No exploitEPSS 2%

    avolvesoftware · projectdoxSep 11, 2014

  • CVE-2014-5132
    18Monitor

    Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses.

    MediumCVSS 4.3No exploitEPSS 2%

    avolvesoftware · projectdoxMar 27, 2018