trivantis kayıtları
trivantis üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-20 Improper Input Validation2
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-264 Permissions, Privileges, and Access Controls1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
38İzleyin | CVE-2013-3599İstismar yok | userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-roletrivantis · coursemill learning management system · CWE-20 | Kritik9,3 | — | %1,9 | 6 Eyl 2013 |
34İzleyin | CVE-2013-3600İstismar yok | Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a modified userid value to unspeciftrivantis · coursemill learning management system · CWE-20 | Yüksek8,5 | — | %1,5 | 6 Eyl 2013 |
30İzleyin | CVE-2007-6338İstismar yok | SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers ttrivantis · coursemill enterprise learning management system · CWE-89 | Yüksek7,5 | — | %1,4 | 14 Ara 2007 |
30İzleyin | CVE-2013-3602İstismar yok | SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users trivantis · coursemill learning management system · CWE-89 | Yüksek7,5 | — | %1,3 | 6 Eyl 2013 |
27İzleyin | CVE-2013-5708İstismar yok | Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers totrivantis · coursemill learning management system · CWE-352 | Orta6,8 | — | %0,7 | 6 Eyl 2013 |
27İzleyin | CVE-2013-3605İstismar yok | Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to hijack the auttrivantis · coursemill learning management system · CWE-352 | Orta6,8 | — | %0,6 | 6 Eyl 2013 |
24İzleyin | CVE-2013-3601İstismar yok | Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to petrivantis · coursemill learning management system · CWE-264 | Orta6,0 | — | %1,0 | 6 Eyl 2013 |
17İzleyin | CVE-2013-5706İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbitrivantis · coursemill learning management system · CWE-79 | Orta4,3 | — | %1,1 | 6 Eyl 2013 |
17İzleyin | CVE-2013-5707İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbitrivantis · coursemill learning management system · CWE-79 | Orta4,3 | — | %1,1 | 6 Eyl 2013 |
17İzleyin | CVE-2013-3603İstismar yok | Cross-site scripting (XSS) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to inject arbitrary web trivantis · coursemill learning management system · CWE-79 | Orta4,3 | — | %1,0 | 6 Eyl 2013 |
17İzleyin | CVE-2013-3604İstismar yok | Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.6 allow remote attackers to inject arbitrivantis · coursemill learning management system · CWE-79 | Orta4,3 | — | %1,0 | 6 Eyl 2013 |
- CVE-2013-359938İzleyin
userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role
KritikCVSS 9,3İstismar yokEPSS %2trivantis · coursemill learning management system6 Eyl 2013
- CVE-2013-360034İzleyin
Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a modified userid value to unspecif
YüksekCVSS 8,5İstismar yokEPSS %2trivantis · coursemill learning management system6 Eyl 2013
- CVE-2007-633830İzleyin
SQL injection vulnerability in userlogin.jsp in Trivantis CourseMill Enterprise Learning Management System 4.1 SP4 allows remote attackers t
YüksekCVSS 7,5İstismar yokEPSS %1trivantis · coursemill enterprise learning management system14 Ara 2007
- CVE-2013-360230İzleyin
SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users
YüksekCVSS 7,5İstismar yokEPSS %1trivantis · coursemill learning management system6 Eyl 2013
- CVE-2013-570827İzleyin
Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to
OrtaCVSS 6,8İstismar yokEPSS %1trivantis · coursemill learning management system6 Eyl 2013
- CVE-2013-360527İzleyin
Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to hijack the aut
OrtaCVSS 6,8İstismar yokEPSS %1trivantis · coursemill learning management system6 Eyl 2013
- CVE-2013-360124İzleyin
Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to pe
OrtaCVSS 6,0İstismar yokEPSS %1trivantis · coursemill learning management system6 Eyl 2013
- CVE-2013-570617İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbi
OrtaCVSS 4,3İstismar yokEPSS %1trivantis · coursemill learning management system6 Eyl 2013
- CVE-2013-570717İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbi
OrtaCVSS 4,3İstismar yokEPSS %1trivantis · coursemill learning management system6 Eyl 2013
- CVE-2013-360317İzleyin
Cross-site scripting (XSS) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to inject arbitrary web
OrtaCVSS 4,3İstismar yokEPSS %1trivantis · coursemill learning management system6 Eyl 2013
- CVE-2013-360417İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.6 allow remote attackers to inject arbi
OrtaCVSS 4,3İstismar yokEPSS %1trivantis · coursemill learning management system6 Eyl 2013