Sismics kayıtları
sismics üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-266 Incorrect Privilege Assignment1
- CWE-90 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-54852İstismar yok | When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injectiosismics · teedy · CWE-90 | Kritik9,8 | — | %0,8 | 29 Oca 2025 |
38İzleyin | CVE-2022-22114İstismar yok | Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionalitysismics · teedy · CWE-79 | Kritik9,6 | — | %1,3 | 10 Oca 2022 |
36İzleyin | CVE-2022-22115İstismar yok | Teedy - Stored Cross-Site Scripting (XSS) in Tag Namesismics · teedy · CWE-79 | Kritik9,0 | — | %1,0 | 10 Oca 2022 |
35İzleyin | CVE-2024-54851İstismar yok | Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF protection.sismics · teedy · CWE-352 | Yüksek8,8 | — | %0,3 | 29 Oca 2025 |
34İzleyin | CVE-2024-46278Kavram kanıtı | Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.sismics · teedy · CWE-79 | Yüksek8,4 | — | %2,8 | 7 Eki 2024 |
30İzleyin | CVE-2025-22963Kavram kanıtı | Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.sismics · teedy · CWE-352 | Yüksek7,5 | — | %0,3 | 13 Oca 2025 |
18İzleyin | CVE-2023-4892İstismar yok | Teedy v1.11 - Stored cross-site scripting (XSS)sismics · teedy · CWE-79 | Orta4,6 | — | %0,4 | 25 Eyl 2023 |
8İzleyin | CVE-2025-11853İstismar yok | Sismics Teedy API Endpoint file access controlsismics · teedy · CWE-266 | Düşük2,1 | — | %0,5 | 16 Eki 2025 |
- CVE-2024-5485239İzleyin
When LDAP connection is activated in Teedy versions between 1.9 to 1.12, the username field of the login form is vulnerable to LDAP injectio
KritikCVSS 9,8İstismar yokEPSS %1sismics · teedy29 Oca 2025
- CVE-2022-2211438İzleyin
Teedy - Reflected Cross-Site Scripting (XSS) in the Search Functionality
KritikCVSS 9,6İstismar yokEPSS %1sismics · teedy10 Oca 2022
- CVE-2022-2211536İzleyin
Teedy - Stored Cross-Site Scripting (XSS) in Tag Name
KritikCVSS 9,0İstismar yokEPSS %1sismics · teedy10 Oca 2022
- CVE-2024-5485135İzleyin
Teedy <= 1.12 is vulnerable to Cross Site Request Forgery (CSRF), due to the lack of CSRF protection.
YüksekCVSS 8,8İstismar yokEPSS %0sismics · teedy29 Oca 2025
- CVE-2024-4627834İzleyin
Teedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.
YüksekCVSS 8,4Kavram kanıtıEPSS %3sismics · teedy7 Eki 2024
- CVE-2025-2296330İzleyin
Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin.
YüksekCVSS 7,5Kavram kanıtıEPSS %0sismics · teedy13 Oca 2025
- CVE-2023-489218İzleyin
Teedy v1.11 - Stored cross-site scripting (XSS)
OrtaCVSS 4,6İstismar yokEPSS %0sismics · teedy25 Eyl 2023
- CVE-2025-118538İzleyin
Sismics Teedy API Endpoint file access control
DüşükCVSS 2,1İstismar yokEPSS %0sismics · teedy16 Eki 2025