joget records

4 published records for vendor joget.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2019-14352No exploit	In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm_community/crm_uservjoget · worfklow · CWE-1236	High7.8	—	0.9%	Jul 28, 2019
24Monitor	CVE-2022-4560No exploit	Joget wflow-core UniversalTheme.java getInternalJsCssLib cross site scriptingjoget · joget dx · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Dec 16, 2022
24Monitor	CVE-2022-4859No exploit	Joget User Profile Menu UserProfileMenu.java submitForm cross site scriptingjoget · joget dx · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Dec 30, 2022
21Monitor	CVE-2022-26197No exploit	Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table.joget · joget dx · CWE-79 XSS	Medium5.4	—	0.5%	Mar 25, 2022

CVE-2019-14352
31Monitor
In Joget Workflow 6.0.20, CSV Injection, also known as Formula Injection, exists, as demonstrated by jw/web/userview/crm_community/crm_userv
HighCVSS 7.8No exploitEPSS 0%
joget · worfklowJul 28, 2019
CVE-2022-4560
24Monitor
Joget wflow-core UniversalTheme.java getInternalJsCssLib cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
joget · joget dxDec 16, 2022
CVE-2022-4859
24Monitor
Joget User Profile Menu UserProfileMenu.java submitForm cross site scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
joget · joget dxDec 30, 2022
CVE-2022-26197
21Monitor
Joget DX 7 was discovered to contain a cross-site scripting (XSS) vulnerability via the Datalist table.
MediumCVSS 5.4No exploitEPSS 0%
- XSS
joget · joget dxMar 25, 2022