kodak records
3 published records for vendor kodak.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
49Plan | CVE-2007-2217Proof of concept | Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute amicrosoft · windows 2000 · CWE-94 | Critical9.3 | — | 41.4% | Oct 9, 2007 |
24Monitor | CVE-2017-9085No exploit | Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via thekodak · insite · CWE-79 | Medium6.1 | — | 0.8% | Nov 14, 2017 |
17Monitor | CVE-2011-1427Proof of concept | Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web script or HTML via kodak · insite · CWE-79 | Medium4.3 | — | 1.5% | Mar 15, 2011 |
- CVE-2007-221749Plan
Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote attackers to execute a
CriticalCVSS 9.3Proof of conceptEPSS 41%microsoft · windows 2000Oct 9, 2007
- CVE-2017-908524Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the
MediumCVSS 6.1No exploitEPSS 0%kodak · insiteNov 14, 2017
- CVE-2011-142717Monitor
Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 5.5.2 allow remote attackers to inject arbitrary web script or HTML via
MediumCVSS 4.3Proof of conceptEPSS 1%kodak · insiteMar 15, 2011