dfir-iris kayıtları
dfir-iris üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %50
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-73 External Control of File Name or Path1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1
- CWE-87 Improper Neutralization of Alternate XSS Syntax1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-34060İstismar yok | Arbitrary File Write in IRIS EVTX Pipelinedfir-iris · iris-evtx-module · CWE-22 | Yüksek8,8 | — | %1,0 | 23 May 2024 |
32İzleyin | CVE-2026-22783İstismar yok | Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Managementdfir-iris · iris · CWE-73 | Yüksek8,1 | — | %0,4 | 12 Oca 2026 |
27İzleyin | CVE-2024-25624İstismar yok | iris-web vulnerable to Server Side Template Injection in reportsdfir-iris · iris · CWE-1336 | Orta6,8 | — | %0,9 | 25 Nis 2024 |
21İzleyin | CVE-2023-30615İstismar yok | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-webdfir-iris · iris · CWE-80 | Orta5,4 | — | %0,4 | 25 May 2023 |
21İzleyin | CVE-2024-25640İstismar yok | Improper Neutralization of Alternate XSS Syntax in iris-webdfir-iris · iris · CWE-87 | Orta5,4 | — | %0,3 | 19 Şub 2024 |
21İzleyin | CVE-2023-50712İstismar yok | Improper Neutralization of Alternate XSS Syntax in iris-webdfir-iris · iris · CWE-79 | Orta5,4 | — | %0,3 | 22 Ara 2023 |
- CVE-2024-3406035İzleyin
Arbitrary File Write in IRIS EVTX Pipeline
YüksekCVSS 8,8İstismar yokEPSS %1dfir-iris · iris-evtx-module23 May 2024
- CVE-2026-2278332İzleyin
Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management
YüksekCVSS 8,1İstismar yokEPSS %0dfir-iris · iris12 Oca 2026
- CVE-2024-2562427İzleyin
iris-web vulnerable to Server Side Template Injection in reports
OrtaCVSS 6,8İstismar yokEPSS %1dfir-iris · iris25 Nis 2024
- CVE-2023-3061521İzleyin
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web
OrtaCVSS 5,4İstismar yokEPSS %0dfir-iris · iris25 May 2023
- CVE-2024-2564021İzleyin
Improper Neutralization of Alternate XSS Syntax in iris-web
OrtaCVSS 5,4İstismar yokEPSS %0dfir-iris · iris19 Şub 2024
- CVE-2023-5071221İzleyin
Improper Neutralization of Alternate XSS Syntax in iris-web
OrtaCVSS 5,4İstismar yokEPSS %0dfir-iris · iris22 Ara 2023