clickstudios records

14 published records for vendor clickstudios.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-54124No exploit	In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen.CWE-863 Broken access control (IDOR)	High8.8	—	0.4%	Nov 29, 2024
31Monitor	CVE-2020-26061Proof of concept	ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability.clickstudios · passwordstate · CWE-306 Pre-auth Auth bypass	High7.5	—	4.5%	Oct 5, 2020
30Monitor	CVE-2022-3875No exploit	Click Studios Passwordstate API authentication bypass by assumed-immutable dataclickstudios · passwordstate · CWE-302 Pre-auth Auth bypass	High7.5	—	1.0%	Dec 19, 2022
27Monitor	CVE-2020-27747Proof of concept	An issue was discovered in Click Studios Passwordstate 8.9 (Build 8973).If the user of the system has assigned himself a PIN code for entericlickstudios · passwordstate · CWE-307	Medium6.8	—	1.1%	Oct 29, 2020
26Monitor	CVE-2022-4612No exploit	Click Studios Passwordstate insufficiently protected credentialsclickstudios · passwordstate · CWE-522 Info leak	Medium6.5	—	0.9%	Dec 19, 2022
26Monitor	CVE-2022-3876No exploit	Click Studios Passwordstate API authorizationclickstudios · passwordstate · CWE-266	Medium6.5	—	0.9%	Dec 19, 2022
26Monitor	CVE-2022-25570No exploit	In Click Studios (SA) Pty Ltd Passwordstate 9435, users with access to a passwordlist can gain access to additional password lists without pclickstudios · passwordstate · CWE-276	Medium6.5	—	0.8%	Mar 21, 2022
26Monitor	CVE-2022-4613No exploit	Click Studios Passwordstate Browser Extension Provisioning improper authorizationclickstudios · passwordstate · CWE-266 Pre-auth	Medium6.5	—	0.7%	Dec 19, 2022
22Monitor	CVE-2022-4610No exploit	Click Studios Passwordstate risky encryptionclickstudios · passwordstate · CWE-310	Medium5.5	—	0.2%	Dec 19, 2022
21Monitor	CVE-2022-4611Proof of concept	Click Studios Passwordstate hard-coded credentialsclickstudios · passwordstate · CWE-798 Pre-auth Hard-coded credentials	Medium5.3	—	1.3%	Dec 19, 2022
21Monitor	CVE-2022-3877No exploit	Click Studios Passwordstate URL Field cross site scriptingclickstudios · passwordstate · CWE-707	Medium5.4	—	0.7%	Dec 19, 2022
21Monitor	CVE-2018-14776No exploit	Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document.clickstudios · passwordstate · CWE-79 XSS	Medium5.4	—	0.5%	Aug 1, 2018
18Monitor	CVE-2023-47801No exploit	An issue was discovered in Click Studios Passwordstate before 9811.clickstudios · passwordstate · CWE-732	Medium4.7	—	0.4%	Nov 13, 2023
14Monitor	CVE-2023-43295No exploit	Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to execclickstudios · passwordstate · CWE-352 RCE CSRF	Low3.5	—	0.2%	Oct 31, 2023

CVE-2024-54124
35Monitor
In Click Studios Passwordstate before build 9920, there is a potential permission escalation on the edit folder screen.
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
Nov 29, 2024
CVE-2020-26061
31Monitor
ClickStudios Passwordstate Password Reset Portal prior to build 8501 is affected by an authentication bypass vulnerability.
HighCVSS 7.5Proof of conceptEPSS 4%
- Pre-auth
- Auth bypass
clickstudios · passwordstateOct 5, 2020
CVE-2022-3875
30Monitor
Click Studios Passwordstate API authentication bypass by assumed-immutable data
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Auth bypass
clickstudios · passwordstateDec 19, 2022
CVE-2020-27747
27Monitor
An issue was discovered in Click Studios Passwordstate 8.9 (Build 8973).If the user of the system has assigned himself a PIN code for enteri
MediumCVSS 6.8Proof of conceptEPSS 1%
clickstudios · passwordstateOct 29, 2020
CVE-2022-4612
26Monitor
Click Studios Passwordstate insufficiently protected credentials
MediumCVSS 6.5No exploitEPSS 1%
- Info leak
clickstudios · passwordstateDec 19, 2022
CVE-2022-3876
26Monitor
Click Studios Passwordstate API authorization
MediumCVSS 6.5No exploitEPSS 1%
clickstudios · passwordstateDec 19, 2022
CVE-2022-25570
26Monitor
In Click Studios (SA) Pty Ltd Passwordstate 9435, users with access to a passwordlist can gain access to additional password lists without p
MediumCVSS 6.5No exploitEPSS 1%
clickstudios · passwordstateMar 21, 2022
CVE-2022-4613
26Monitor
Click Studios Passwordstate Browser Extension Provisioning improper authorization
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
clickstudios · passwordstateDec 19, 2022
CVE-2022-4610
22Monitor
Click Studios Passwordstate risky encryption
MediumCVSS 5.5No exploitEPSS 0%
clickstudios · passwordstateDec 19, 2022
CVE-2022-4611
21Monitor
Click Studios Passwordstate hard-coded credentials
MediumCVSS 5.3Proof of conceptEPSS 1%
- Pre-auth
- Hard-coded credentials
clickstudios · passwordstateDec 19, 2022
CVE-2022-3877
21Monitor
Click Studios Passwordstate URL Field cross site scripting
MediumCVSS 5.4No exploitEPSS 1%
clickstudios · passwordstateDec 19, 2022
CVE-2018-14776
21Monitor
Click Studios Passwordstate before 8.3 Build 8397 allows XSS by authenticated users via an uploaded HTML document.
MediumCVSS 5.4No exploitEPSS 1%
- XSS
clickstudios · passwordstateAug 1, 2018
CVE-2023-47801
18Monitor
An issue was discovered in Click Studios Passwordstate before 9811.
MediumCVSS 4.7No exploitEPSS 0%
clickstudios · passwordstateNov 13, 2023
CVE-2023-43295
14Monitor
Cross Site Request Forgery vulnerability in Click Studios (SA) Pty Ltd Passwordstate v.Build 9785 and before allows a local attacker to exec
LowCVSS 3.5No exploitEPSS 0%
- RCE
- CSRF
clickstudios · passwordstateOct 31, 2023