jatos kayıtları
jatos üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %16,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
33İzleyin | CVE-2024-51379İstismar yok | Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3.jatos · jatos · CWE-79 | Yüksek8,4 | — | %0,6 | 5 Kas 2024 |
33İzleyin | CVE-2024-51380İstismar yok | Stored Cross-Site Scripting (XSS) vulnerability discovered in the Properties Component of JATOS v3.9.3.jatos · jatos · CWE-79 | Yüksek8,4 | — | %0,5 | 5 Kas 2024 |
33İzleyin | CVE-2024-51381İstismar yok | Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to perform actions reserved for administrators, includjatos · jatos · CWE-352 | Yüksek8,4 | — | %0,2 | 5 Kas 2024 |
33İzleyin | CVE-2024-51382İstismar yok | Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password.jatos · jatos · CWE-352 | Yüksek8,4 | — | %0,2 | 5 Kas 2024 |
30İzleyin | CVE-2024-55008İstismar yok | JATOS 3.9.4 contains a denial-of-service (DoS) vulnerability in the authentication system, where an attacker can prevent legitimate users frjatos · jatos · CWE-307 | Yüksek7,5 | — | %0,8 | 7 Oca 2025 |
21İzleyin | CVE-2022-4878İstismar yok | JATOS ZIP ZipUtil.java ZipUtil path traversaljatos · jatos · CWE-22 | Orta5,3 | — | %0,6 | 6 Oca 2023 |
- CVE-2024-5137933İzleyin
Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3.
YüksekCVSS 8,4İstismar yokEPSS %0jatos · jatos5 Kas 2024
- CVE-2024-5138033İzleyin
Stored Cross-Site Scripting (XSS) vulnerability discovered in the Properties Component of JATOS v3.9.3.
YüksekCVSS 8,4İstismar yokEPSS %0jatos · jatos5 Kas 2024
- CVE-2024-5138133İzleyin
Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to perform actions reserved for administrators, includ
YüksekCVSS 8,4İstismar yokEPSS %0jatos · jatos5 Kas 2024
- CVE-2024-5138233İzleyin
Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password.
YüksekCVSS 8,4İstismar yokEPSS %0jatos · jatos5 Kas 2024
- CVE-2024-5500830İzleyin
JATOS 3.9.4 contains a denial-of-service (DoS) vulnerability in the authentication system, where an attacker can prevent legitimate users fr
YüksekCVSS 7,5İstismar yokEPSS %0jatos · jatos7 Oca 2025
- CVE-2022-487821İzleyin
JATOS ZIP ZipUtil.java ZipUtil path traversal
OrtaCVSS 5,3İstismar yokEPSS %0jatos · jatos6 Oca 2023