lumis kayıtları
lumis üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-798 Use of Hard-coded Credentials1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2021-27931Kavram kanıtı | LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp.lumis · lumis experience platform · CWE-611 | Kritik9,1 | — | %18,1 | 3 Mar 2021 |
30İzleyin | CVE-2024-33329İstismar yok | A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass authentication and access internal pages and other seCWE-798 | Yüksek7,5 | — | %0,6 | 26 Haz 2024 |
24İzleyin | CVE-2024-33326Kavram kanıtı | A cross-site scripting (XSS) vulnerability in the component XsltResultControllerHtml.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to eCWE-79 | Orta6,1 | — | %0,8 | 26 Haz 2024 |
24İzleyin | CVE-2024-33328İstismar yok | A cross-site scripting (XSS) vulnerability in the component main.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to execute arbitrary webCWE-79 | Orta6,1 | — | %0,4 | 26 Haz 2024 |
24İzleyin | CVE-2024-33327İstismar yok | A cross-site scripting (XSS) vulnerability in the component UrlAccessibilityEvaluation.jsp of Lumisxp v15.0.x to v16.1.x allows attackers toCWE-79 | Orta6,1 | — | %0,4 | 26 Haz 2024 |
- CVE-2021-2793141Planlayın
LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp.
KritikCVSS 9,1Kavram kanıtıEPSS %18lumis · lumis experience platform3 Mar 2021
- CVE-2024-3332930İzleyin
A hardcoded privileged ID within Lumisxp v15.0.x to v16.1.x allows attackers to bypass authentication and access internal pages and other se
YüksekCVSS 7,5İstismar yokEPSS %026 Haz 2024
- CVE-2024-3332624İzleyin
A cross-site scripting (XSS) vulnerability in the component XsltResultControllerHtml.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to e
OrtaCVSS 6,1Kavram kanıtıEPSS %026 Haz 2024
- CVE-2024-3332824İzleyin
A cross-site scripting (XSS) vulnerability in the component main.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to execute arbitrary web
OrtaCVSS 6,1İstismar yokEPSS %026 Haz 2024
- CVE-2024-3332724İzleyin
A cross-site scripting (XSS) vulnerability in the component UrlAccessibilityEvaluation.jsp of Lumisxp v15.0.x to v16.1.x allows attackers to
OrtaCVSS 6,1İstismar yokEPSS %026 Haz 2024