oneclickorgs records
6 published records for vendor oneclickorgs.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-20 Improper Input Validation2
- CWE-255 Credentials Management Errors2
- CWE-287 Improper Authentication1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
30Monitor | CVE-2011-4677No exploit | One Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackeroneclickorgs · one click orgs · CWE-287 | High7.5 | — | 1.2% | Dec 6, 2011 |
23Monitor | CVE-2011-4553No exploit | Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow (1) remote attackers to redirect users to arbitrary web sites anoneclickorgs · one click orgs · CWE-20 | Medium5.8 | — | 0.9% | Dec 6, 2011 |
22Monitor | CVE-2011-4554No exploit | One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline characteroneclickorgs · one click orgs · CWE-20 | Medium5.5 | — | 0.8% | Dec 6, 2011 |
20Monitor | CVE-2011-4678No exploit | The password reset feature in One Click Orgs before 1.2.3 generates different error messages for failed reset attempts depending on whether oneclickorgs · one click orgs · CWE-255 | Medium5.0 | — | 1.0% | Dec 6, 2011 |
17Monitor | CVE-2011-4552No exploit | Multiple cross-site scripting (XSS) vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arbitrary web script or oneclickorgs · one click orgs · CWE-79 | Medium4.3 | — | 0.8% | Dec 6, 2011 |
16Monitor | CVE-2011-4555No exploit | One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a doneclickorgs · one click orgs · CWE-255 | Medium4.0 | — | 0.8% | Dec 6, 2011 |
- CVE-2011-467730Monitor
One Click Orgs before 1.2.3 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attacker
HighCVSS 7.5No exploitEPSS 1%oneclickorgs · one click orgsDec 6, 2011
- CVE-2011-455323Monitor
Multiple open redirect vulnerabilities in One Click Orgs before 1.2.3 allow (1) remote attackers to redirect users to arbitrary web sites an
MediumCVSS 5.8No exploitEPSS 0%oneclickorgs · one click orgsDec 6, 2011
- CVE-2011-455422Monitor
One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via (1) " (double quote) and newline character
MediumCVSS 5.5No exploitEPSS 0%oneclickorgs · one click orgsDec 6, 2011
- CVE-2011-467820Monitor
The password reset feature in One Click Orgs before 1.2.3 generates different error messages for failed reset attempts depending on whether
MediumCVSS 5.0No exploitEPSS 1%oneclickorgs · one click orgsDec 6, 2011
- CVE-2011-455217Monitor
Multiple cross-site scripting (XSS) vulnerabilities in One Click Orgs before 1.2.3 allow remote attackers to inject arbitrary web script or
MediumCVSS 4.3No exploitEPSS 0%oneclickorgs · one click orgsDec 6, 2011
- CVE-2011-455516Monitor
One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a d
MediumCVSS 4.0No exploitEPSS 0%oneclickorgs · one click orgsDec 6, 2011