Nintex kayıtları
nintex üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-276 Incorrect Default Permissions1
- CWE-502 Deserialization of Untrusted Data1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-27925İstismar yok | Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input.nintex · automation · CWE-502 | Kritik9,8 | — | %0,4 | 10 Mar 2025 |
31İzleyin | CVE-2015-7299İstismar yok | SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attackenintex · k2 blackpearl · CWE-89 | Yüksek7,5 | — | %2,3 | 21 Eki 2015 |
24İzleyin | CVE-2022-38167İstismar yok | The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS.nintex · workflow · CWE-79 | Orta6,1 | — | %0,4 | 14 Kas 2022 |
21İzleyin | CVE-2025-27926İstismar yok | In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords thanintex · automation · CWE-276 | Orta5,3 | — | %0,3 | 10 Mar 2025 |
21İzleyin | CVE-2025-27924İstismar yok | Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action.nintex · automation · CWE-79 | Orta5,4 | — | %0,2 | 10 Mar 2025 |
- CVE-2025-2792539İzleyin
Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input.
KritikCVSS 9,8İstismar yokEPSS %0nintex · automation10 Mar 2025
- CVE-2015-729931İzleyin
SQL injection vulnerability in Runtime/Runtime/AjaxCall.ashx in K2 blackpearl, smartforms, and K2 for SharePoint 4.6.7 allows remote attacke
YüksekCVSS 7,5İstismar yokEPSS %2nintex · k2 blackpearl21 Eki 2015
- CVE-2022-3816724İzleyin
The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XSS.
OrtaCVSS 6,1İstismar yokEPSS %0nintex · workflow14 Kas 2022
- CVE-2025-2792621İzleyin
In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords tha
OrtaCVSS 5,3İstismar yokEPSS %0nintex · automation10 Mar 2025
- CVE-2025-2792421İzleyin
Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action.
OrtaCVSS 5,4İstismar yokEPSS %0nintex · automation10 Mar 2025