resourcexpress records
3 published records for vendor resourcexpress.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-13877No exploit | SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosresourcexpress · meeting monitor · CWE-89 | Critical9.8 | — | 2.2% | Nov 12, 2020 |
21Monitor | CVE-2020-28898No exploit | In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in scriresourcexpress · resourcexpress · CWE-20 | Medium5.3 | — | 1.2% | Apr 15, 2021 |
18Monitor | CVE-2020-25746No exploit | QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obtain sensitive informaresourcexpress · qubi3 firmware · CWE-200 | Medium4.6 | — | 0.3% | Nov 17, 2020 |
- CVE-2020-1387740Plan
SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclos
CriticalCVSS 9.8No exploitEPSS 2%resourcexpress · meeting monitorNov 12, 2020
- CVE-2020-2889821Monitor
In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in scri
MediumCVSS 5.3No exploitEPSS 1%resourcexpress · resourcexpressApr 15, 2021
- CVE-2020-2574618Monitor
QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obtain sensitive informa
MediumCVSS 4.6No exploitEPSS 0%resourcexpress · qubi3 firmwareNov 17, 2020