terminalfour kayıtları

terminalfour üreticisine ait 8 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

8 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
39İzleyin	CVE-2025-58386İstismar yok	In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authorizatioterminalfour · terminalfour · CWE-285 Kimlik doğrulamasız Erişim denetimi (IDOR)	Kritik9,8	—	%0,3	2 Ara 2025
35İzleyin	CVE-2024-22218İstismar yok	XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated usersCWE-611 RCE SSRF XXE	Yüksek8,8	—	%0,7	15 Ağu 2024
26İzleyin	CVE-2023-29484İstismar yok	In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password.terminalfour · terminalfour · CWE-863 Erişim denetimi (IDOR)	Orta6,5	—	%0,4	16 Eki 2023
26İzleyin	CVE-2024-22217İstismar yok	A Server-Side Request Forgery (SSRF) vulnerability in Terminalfour before 8.3.19 allows authenticated users to use specific features to acceterminalfour · terminalfour · CWE-918 SSRF	Orta6,5	—	%0,3	15 Ağu 2024
25İzleyin	CVE-2024-22219İstismar yok	XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated usersCWE-918 RCE SSRF XXE	Orta6,3	—	%0,4	15 Ağu 2024
25İzleyin	CVE-2024-22220İstismar yok	An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL.terminalfour · formbank · CWE-79 XSS	Orta6,3	—	%0,3	21 Şub 2024
24İzleyin	CVE-2022-30770İstismar yok	Terminalfour versions 8.3.7, 8.3.x versions prior to version 8.3.8 and r 8.2.x versions prior to version 8.2.18.5 or 8.2.18.2.1 are vulnerabterminalfour · terminalfour · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,0	15 May 2022
19İzleyin	CVE-2023-23591İstismar yok	The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs terminalfour · terminalfour · CWE-532 Bilgi sızıntısı	Orta4,9	—	%0,5	12 Nis 2023

CVE-2025-58386
39İzleyin
In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authorizatio
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
terminalfour · terminalfour2 Ara 2025
CVE-2024-22218
35İzleyin
XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated users
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
- SSRF
- XXE
15 Ağu 2024
CVE-2023-29484
26İzleyin
In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password.
OrtaCVSS 6,5İstismar yokEPSS %0
- Erişim denetimi (IDOR)
terminalfour · terminalfour16 Eki 2023
CVE-2024-22217
26İzleyin
A Server-Side Request Forgery (SSRF) vulnerability in Terminalfour before 8.3.19 allows authenticated users to use specific features to acce
OrtaCVSS 6,5İstismar yokEPSS %0
- SSRF
terminalfour · terminalfour15 Ağu 2024
CVE-2024-22219
25İzleyin
XML External Entity (XXE) vulnerability in Terminalfour 8.0.0001 through 8.3.18 and XML JDBC versions up to 1.0.4 allows authenticated users
OrtaCVSS 6,3İstismar yokEPSS %0
- RCE
- SSRF
- XXE
15 Ağu 2024
CVE-2024-22220
25İzleyin
An issue was discovered in Terminalfour 7.4 through 7.4.0004 QP3 and 8 through 8.3.19, and Formbank through 2.1.10-FINAL.
OrtaCVSS 6,3İstismar yokEPSS %0
- XSS
terminalfour · formbank21 Şub 2024
CVE-2022-30770
24İzleyin
Terminalfour versions 8.3.7, 8.3.x versions prior to version 8.3.8 and r 8.2.x versions prior to version 8.2.18.5 or 8.2.18.2.1 are vulnerab
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
terminalfour · terminalfour15 May 2022
CVE-2023-23591
19İzleyin
The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs
OrtaCVSS 4,9İstismar yokEPSS %0
- Bilgi sızıntısı
terminalfour · terminalfour12 Nis 2023