webswing records
3 published records for vendor webswing.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-11103No exploit | JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.webswing · webswing | Critical9.8 | — | 2.8% | Dec 30, 2020 |
39Monitor | CVE-2024-39332No exploit | Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading to remote code execuwebswing · webswing · CWE-22 | Critical9.8 | — | 1.2% | Oct 31, 2024 |
39Monitor | CVE-2022-34914No exploit | Webswing before 22.1.3 allows X-Forwarded-For header injection.webswing · webswing · CWE-74 | Critical9.8 | — | 1.0% | Jul 8, 2022 |
- CVE-2020-1110340Plan
JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.
CriticalCVSS 9.8No exploitEPSS 2%webswing · webswingDec 30, 2020
- CVE-2024-3933239Monitor
Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading to remote code execu
CriticalCVSS 9.8No exploitEPSS 1%webswing · webswingOct 31, 2024
- CVE-2022-3491439Monitor
Webswing before 22.1.3 allows X-Forwarded-For header injection.
CriticalCVSS 9.8No exploitEPSS 1%webswing · webswingJul 8, 2022