vtenext records
4 published records for vendor vtenext.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2020-10228No exploit | A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote covtenext · vtenext · CWE-434 | High8.8 | — | 2.8% | Sep 14, 2020 |
35Monitor | CVE-2020-10229No exploit | A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, avtenext · vtenext · CWE-352 | High8.8 | — | 0.8% | Sep 14, 2020 |
32Monitor | CVE-2023-46694Proof of concept | Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote commands.CWE-434 | High8.1 | — | 0.9% | May 28, 2024 |
24Monitor | CVE-2020-10227No exploit | A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript covtenext · vtenext · CWE-79 | Medium6.1 | — | 1.1% | Sep 14, 2020 |
- CVE-2020-1022836Monitor
A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote co
HighCVSS 8.8No exploitEPSS 2%vtenext · vtenextSep 14, 2020
- CVE-2020-1022935Monitor
A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, a
HighCVSS 8.8No exploitEPSS 0%vtenext · vtenextSep 14, 2020
- CVE-2023-4669432Monitor
Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, potentially enabling them to execute remote commands.
HighCVSS 8.1Proof of conceptEPSS 0%May 28, 2024
- CVE-2020-1022724Monitor
A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript co
MediumCVSS 6.1No exploitEPSS 1%vtenext · vtenextSep 14, 2020