jspxcms kayıtları
jspxcms üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-284 Improper Access Control1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2018-20596İstismar yok | Jspxcms v9.0.0 allows SSRF.jspxcms · jspxcms · CWE-918 | Kritik9,8 | — | %1,1 | 30 Ara 2018 |
29İzleyin | CVE-2018-16553İstismar yok | In Jspxcms 9.0.0, a vulnerable URL routing implementation allows remote code execution after logging in as web admin.jspxcms · jspxcms · CWE-284 | Yüksek7,2 | — | %2,5 | 20 Haz 2019 |
26İzleyin | CVE-2024-1200İstismar yok | Jspxcms information disclosurejspxcms · jspxcms · CWE-200 | Orta6,5 | — | %0,9 | 2 Şub 2024 |
24İzleyin | CVE-2024-0721İstismar yok | Jspxcms Survey Label cross site scriptingjspxcms · jspxcms · CWE-79 | Orta6,1 | — | %0,5 | 19 Oca 2024 |
24İzleyin | CVE-2023-46911İstismar yok | There is a Cross Site Scripting (XSS) vulnerability in the choose_style_tree.do interface of Jspxcms v10.2.0 backend.jspxcms · jspxcms · CWE-79 | Orta6,1 | — | %0,4 | 1 Kas 2023 |
- CVE-2018-2059639İzleyin
Jspxcms v9.0.0 allows SSRF.
KritikCVSS 9,8İstismar yokEPSS %1jspxcms · jspxcms30 Ara 2018
- CVE-2018-1655329İzleyin
In Jspxcms 9.0.0, a vulnerable URL routing implementation allows remote code execution after logging in as web admin.
YüksekCVSS 7,2İstismar yokEPSS %3jspxcms · jspxcms20 Haz 2019
- CVE-2024-120026İzleyin
Jspxcms information disclosure
OrtaCVSS 6,5İstismar yokEPSS %1jspxcms · jspxcms2 Şub 2024
- CVE-2024-072124İzleyin
Jspxcms Survey Label cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %0jspxcms · jspxcms19 Oca 2024
- CVE-2023-4691124İzleyin
There is a Cross Site Scripting (XSS) vulnerability in the choose_style_tree.do interface of Jspxcms v10.2.0 backend.
OrtaCVSS 6,1İstismar yokEPSS %0jspxcms · jspxcms1 Kas 2023