squaredup kayıtları

squaredup üreticisine ait 13 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

13 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2021-40091İstismar yok	An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.squaredup · squaredup · CWE-918 Kimlik doğrulamasız SSRF	Kritik9,8	—	%1,1	6 Ara 2021
26İzleyin	CVE-2020-9388İstismar yok	CSRF protection was not present in SquaredUp before version 4.6.0.squaredup · squaredup · CWE-352 pre-auth RCE CSRF	Orta6,5	—	%0,8	3 Şub 2021
24İzleyin	CVE-2022-46785İstismar yok	SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).squaredup · dashboard server · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	23 Şub 2023
24İzleyin	CVE-2022-46784İstismar yok	SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection.squaredup · dashboard server · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Orta6,1	—	%0,4	23 Şub 2023
21İzleyin	CVE-2020-9390İstismar yok	SquaredUp allowed Stored XSS before version 4.6.0.squaredup · squaredup · CWE-79 XSS	Orta5,4	—	%0,9	3 Şub 2021
21İzleyin	CVE-2021-40096İstismar yok	A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject asquaredup · squaredup · CWE-79 XSS	Orta5,4	—	%0,7	7 Ara 2021
21İzleyin	CVE-2021-40093İstismar yok	A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject asquaredup · squaredup · CWE-79 XSS	Orta5,4	—	%0,6	7 Ara 2021
21İzleyin	CVE-2021-40092İstismar yok	A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web scsquaredup · squaredup · CWE-79 XSS	Orta5,4	—	%0,6	7 Ara 2021
21İzleyin	CVE-2021-40094İstismar yok	A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654.squaredup · squaredup · CWE-79 XSS	Orta5,4	—	%0,5	7 Ara 2021
21İzleyin	CVE-2022-46786İstismar yok	SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).squaredup · dashboard server · CWE-79 XSS	Orta5,4	—	%0,4	23 Şub 2023
21İzleyin	CVE-2024-45180İstismar yok	SquaredUp DS for SCOM 6.2.1.11104 allows XSS.squaredup · squaredup ds for scom · CWE-79 XSS	Orta5,4	—	%0,2	3 Eyl 2024
19İzleyin	CVE-2021-40095İstismar yok	An issue was discovered in SquaredUp for SCOM 5.2.1.6654.squaredup · squaredup	Orta4,9	—	%1,0	7 Ara 2021
14İzleyin	CVE-2020-9389İstismar yok	A username enumeration issue was discovered in SquaredUp before version 4.6.0.squaredup · squaredup · CWE-203 Kimlik doğrulamasız	Düşük3,7	—	%0,9	3 Şub 2021

CVE-2021-40091
39İzleyin
An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- SSRF
squaredup · squaredup6 Ara 2021
CVE-2020-9388
26İzleyin
CSRF protection was not present in SquaredUp before version 4.6.0.
OrtaCVSS 6,5İstismar yokEPSS %1
- pre-auth RCE
- CSRF
squaredup · squaredup3 Şub 2021
CVE-2022-46785
24İzleyin
SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
squaredup · dashboard server23 Şub 2023
CVE-2022-46784
24İzleyin
SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection.
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- Açık yönlendirme
squaredup · dashboard server23 Şub 2023
CVE-2020-9390
21İzleyin
SquaredUp allowed Stored XSS before version 4.6.0.
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
squaredup · squaredup3 Şub 2021
CVE-2021-40096
21İzleyin
A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject a
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
squaredup · squaredup7 Ara 2021
CVE-2021-40093
21İzleyin
A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject a
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
squaredup · squaredup7 Ara 2021
CVE-2021-40092
21İzleyin
A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web sc
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
squaredup · squaredup7 Ara 2021
CVE-2021-40094
21İzleyin
A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654.
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
squaredup · squaredup7 Ara 2021
CVE-2022-46786
21İzleyin
SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
squaredup · dashboard server23 Şub 2023
CVE-2024-45180
21İzleyin
SquaredUp DS for SCOM 6.2.1.11104 allows XSS.
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
squaredup · squaredup ds for scom3 Eyl 2024
CVE-2021-40095
19İzleyin
An issue was discovered in SquaredUp for SCOM 5.2.1.6654.
OrtaCVSS 4,9İstismar yokEPSS %1
squaredup · squaredup7 Ara 2021
CVE-2020-9389
14İzleyin
A username enumeration issue was discovered in SquaredUp before version 4.6.0.
DüşükCVSS 3,7İstismar yokEPSS %1
- Kimlik doğrulamasız
squaredup · squaredup3 Şub 2021