smartstore records

7 published records for vendor smartstore.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
49Plan	CVE-2021-32608No exploit	An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.smartstore · smartstore Pre-auth	Critical9.8	—	33.4%	May 12, 2021
49Plan	CVE-2021-32607No exploit	An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.smartstore · smartstore Pre-auth	Critical9.8	—	33.4%	May 12, 2021
39Monitor	CVE-2020-15243No exploit	WebApi Authentication attribute missing in Smartstoresmartstore · smartstore · CWE-287 Pre-auth Auth bypass	Critical9.8	—	1.2%	Oct 8, 2020
37Monitor	CVE-2020-36364No exploit	An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0.smartstore · smartstorenet · CWE-22 Pre-auth Path traversal	Critical9.1	—	1.8%	May 19, 2021
36Monitor	CVE-2020-27996No exploit	An issue was discovered in SmartStoreNET before 4.0.1.smartstore · smartstorenet	High8.8	—	2.2%	Oct 29, 2020
35Monitor	CVE-2020-27997No exploit	An issue was discovered in SmartStoreNET before 4.1.0.smartstore · smartstorenet · CWE-352 Pre-auth CSRF	High8.8	—	0.8%	Feb 19, 2021
25Monitor	CVE-2020-36365Proof of concept	Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskContsmartstore · smartstorenet · CWE-601 Pre-auth Open redirect	Medium6.1	—	3.0%	May 19, 2021

CVE-2021-32608
49Plan
An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.
CriticalCVSS 9.8No exploitEPSS 33%
- Pre-auth
smartstore · smartstoreMay 12, 2021
CVE-2021-32607
49Plan
An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.
CriticalCVSS 9.8No exploitEPSS 33%
- Pre-auth
smartstore · smartstoreMay 12, 2021
CVE-2020-15243
39Monitor
WebApi Authentication attribute missing in Smartstore
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
smartstore · smartstoreOct 8, 2020
CVE-2020-36364
37Monitor
An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0.
CriticalCVSS 9.1No exploitEPSS 2%
- Pre-auth
- Path traversal
smartstore · smartstorenetMay 19, 2021
CVE-2020-27996
36Monitor
An issue was discovered in SmartStoreNET before 4.0.1.
HighCVSS 8.8No exploitEPSS 2%
smartstore · smartstorenetOct 29, 2020
CVE-2020-27997
35Monitor
An issue was discovered in SmartStoreNET before 4.1.0.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
smartstore · smartstorenetFeb 19, 2021
CVE-2020-36365
25Monitor
Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskCont
MediumCVSS 6.1Proof of conceptEPSS 3%
- Pre-auth
- Open redirect
smartstore · smartstorenetMay 19, 2021