openmaint records
2 published records for vendor openmaint.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2020-24549No exploit | openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server.openmaint · openmaint · CWE-434 | High8.8 | — | 2.6% | Jan 26, 2021 |
25Monitor | CVE-2021-27695Proof of concept | Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or Hopenmaint · openmaint · CWE-79 | Medium6.1 | — | 3.0% | Mar 15, 2021 |
- CVE-2020-2454936Monitor
openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server.
HighCVSS 8.8No exploitEPSS 2%openmaint · openmaintJan 26, 2021
- CVE-2021-2769525Monitor
Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or H
MediumCVSS 6.1Proof of conceptEPSS 3%openmaint · openmaintMar 15, 2021