marmind records

3 published records for vendor marmind.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2020-26507No exploit	A CSV Injection (also known as Formula Injection) vulnerability in the Marmind web application with version 4.1.141.0 allows malicious usersmarmind · marmind · CWE-1236	High7.8	—	1.0%	Nov 5, 2020
24Monitor	CVE-2020-26505No exploit	A Stored Cross-Site Scripting (XSS) vulnerability in the “Marmind” web application with version 4.1.141.0 allows an attacker to inject code marmind · marmind · CWE-79 Pre-auth XSS	Medium6.1	—	0.7%	Nov 5, 2020
17Monitor	CVE-2020-26506No exploit	An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain contrmarmind · marmind · CWE-670	Medium4.3	—	0.7%	Nov 5, 2020

CVE-2020-26507
31Monitor
A CSV Injection (also known as Formula Injection) vulnerability in the Marmind web application with version 4.1.141.0 allows malicious users
HighCVSS 7.8No exploitEPSS 1%
marmind · marmindNov 5, 2020
CVE-2020-26505
24Monitor
A Stored Cross-Site Scripting (XSS) vulnerability in the “Marmind” web application with version 4.1.141.0 allows an attacker to inject code
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
marmind · marmindNov 5, 2020
CVE-2020-26506
17Monitor
An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain contr
MediumCVSS 4.3No exploitEPSS 0%
marmind · marmindNov 5, 2020