Skip to content
Noroxi

cliniccases records

4 published records for vendor cliniccases.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2021-38706
    35Monitor

    messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged attackers to execute ar

    HighCVSS 8.8No exploitEPSS 1%

    cliniccases · cliniccasesSep 7, 2021

  • CVE-2021-38705
    35Monitor

    ClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF).

    HighCVSS 8.8No exploitEPSS 0%

    cliniccases · cliniccasesSep 7, 2021

  • CVE-2021-38704
    25Monitor

    Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary Ja

    MediumCVSS 6.1Proof of conceptEPSS 3%

    cliniccases · cliniccasesSep 7, 2021

  • CVE-2021-38707
    21Monitor

    Persistent cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce arbitrary JavaScript

    MediumCVSS 5.4No exploitEPSS 0%

    cliniccases · cliniccasesSep 7, 2021