itb-pim records
3 published records for vendor itb-pim.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-36645Proof of concept | SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer functitb-pim · tradepro · CWE-94 | Critical9.8 | — | 0.8% | Apr 4, 2024 |
21Monitor | CVE-2023-36644Proof of concept | Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the itb-pim · tradepro · CWE-284 | Medium5.3 | — | 0.9% | Apr 4, 2024 |
21Monitor | CVE-2023-36643Proof of concept | Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow componitb-pim · tradepro · CWE-284 | Medium5.3 | — | 0.6% | Apr 4, 2024 |
- CVE-2023-3664539Monitor
SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer funct
CriticalCVSS 9.8Proof of conceptEPSS 0%itb-pim · tradeproApr 4, 2024
- CVE-2023-3664421Monitor
Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the
MediumCVSS 5.3Proof of conceptEPSS 0%itb-pim · tradeproApr 4, 2024
- CVE-2023-3664321Monitor
Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow compon
MediumCVSS 5.3Proof of conceptEPSS 0%itb-pim · tradeproApr 4, 2024