cloverdx records
4 published records for vendor cloverdx.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-532 Insertion of Sensitive Information into Log File1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2021-29995Proof of concept | A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows remote attackers to execute any action as the lcloverdx · cloverdx · CWE-352 | High8.8 | — | 4.2% | Jun 9, 2021 |
30Monitor | CVE-2021-42776No exploit | CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import.cloverdx · cloverdx · CWE-611 | High7.7 | — | 0.7% | Dec 1, 2021 |
26Monitor | CVE-2023-31056No exploit | CloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log is enabled and single sign-on is not employcloverdx · cloverdx · CWE-532 | Medium6.5 | — | 0.6% | Apr 23, 2023 |
24Monitor | CVE-2021-30133No exploit | A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers to cloverdx · cloverdx · CWE-79 | Medium6.1 | — | 0.7% | Jun 9, 2021 |
- CVE-2021-2999536Monitor
A Cross Site Request Forgery (CSRF) issue in Server Console in CloverDX through 5.9.0 allows remote attackers to execute any action as the l
HighCVSS 8.8Proof of conceptEPSS 4%cloverdx · cloverdxJun 9, 2021
- CVE-2021-4277630Monitor
CloverDX Server before 5.11.2 and and 5.12.x before 5.12.1 allows XXE during configuration import.
HighCVSS 7.7No exploitEPSS 0%cloverdx · cloverdxDec 1, 2021
- CVE-2023-3105626Monitor
CloverDX before 5.17.3 writes passwords to the audit log in certain situations, if the audit log is enabled and single sign-on is not employ
MediumCVSS 6.5No exploitEPSS 0%cloverdx · cloverdxApr 23, 2023
- CVE-2021-3013324Monitor
A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers to
MediumCVSS 6.1No exploitEPSS 0%cloverdx · cloverdxJun 9, 2021