nxfilter records
4 published records for vendor nxfilter.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-90 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-6905No exploit | Jahastech NxFilter Bind Request ldap injectionnxfilter · nxfilter · CWE-90 | Critical9.8 | — | 0.6% | Dec 17, 2023 |
35Monitor | CVE-2023-6904No exploit | Jahastech NxFilter config,admin.jsp cross-site request forgerynxfilter · nxfilter · CWE-352 | High8.8 | — | 0.3% | Dec 17, 2023 |
35Monitor | CVE-2023-3841No exploit | NxFilter user.jsp cross-site request forgerynxfilter · nxfilter · CWE-352 | High8.8 | — | 0.2% | Jul 22, 2023 |
24Monitor | CVE-2023-3840No exploit | NxFilter cross site scriptingnxfilter · nxfilter · CWE-79 | Medium6.1 | — | 0.3% | Jul 22, 2023 |
- CVE-2023-690539Monitor
Jahastech NxFilter Bind Request ldap injection
CriticalCVSS 9.8No exploitEPSS 0%nxfilter · nxfilterDec 17, 2023
- CVE-2023-690435Monitor
Jahastech NxFilter config,admin.jsp cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%nxfilter · nxfilterDec 17, 2023
- CVE-2023-384135Monitor
NxFilter user.jsp cross-site request forgery
HighCVSS 8.8No exploitEPSS 0%nxfilter · nxfilterJul 22, 2023
- CVE-2023-384024Monitor
NxFilter cross site scripting
MediumCVSS 6.1No exploitEPSS 0%nxfilter · nxfilterJul 22, 2023