iris kayıtları

iris üreticisine ait 7 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

7 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2020-28405İstismar yok	An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change tiris · star practice management	Yüksek8,8	—	%1,6	29 Oca 2021
35İzleyin	CVE-2020-28402İstismar yok	An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Liris · star practice management	Yüksek8,8	—	%1,4	29 Oca 2021
35İzleyin	CVE-2020-28403İstismar yok	A Cross-Site Request Forgery (CSRF) vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an attacker to change iris · star · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,7	29 Oca 2021
26İzleyin	CVE-2020-28404İstismar yok	An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access tiris · star practice management	Orta6,5	—	%1,3	29 Oca 2021
26İzleyin	CVE-2020-28401İstismar yok	An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Wiris · star practice management	Orta6,5	—	%1,3	29 Oca 2021
26İzleyin	CVE-2020-28406İstismar yok	An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access diris · star practice management	Orta6,5	—	%1,3	29 Oca 2021
21İzleyin	CVE-2022-37028İstismar yok	ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker to store a JavaScripiris · isams · CWE-79 XSS	Orta5,4	—	%0,6	27 Eyl 2022

CVE-2020-28405
35İzleyin
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change t
YüksekCVSS 8,8İstismar yokEPSS %2
iris · star practice management29 Oca 2021
CVE-2020-28402
35İzleyin
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access L
YüksekCVSS 8,8İstismar yokEPSS %1
iris · star practice management29 Oca 2021
CVE-2020-28403
35İzleyin
A Cross-Site Request Forgery (CSRF) vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an attacker to change
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
iris · star29 Oca 2021
CVE-2020-28404
26İzleyin
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access t
OrtaCVSS 6,5İstismar yokEPSS %1
iris · star practice management29 Oca 2021
CVE-2020-28401
26İzleyin
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access W
OrtaCVSS 6,5İstismar yokEPSS %1
iris · star practice management29 Oca 2021
CVE-2020-28406
26İzleyin
An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access d
OrtaCVSS 6,5İstismar yokEPSS %1
iris · star practice management29 Oca 2021
CVE-2022-37028
21İzleyin
ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker to store a JavaScrip
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
iris · isams27 Eyl 2022