tufin kayıtları

tufin üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

9 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2018-18406İstismar yok	An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final).tufin · securetrack · CWE-611 XXE	Kritik9,9	—	%1,9	19 Haz 2019
35İzleyin	CVE-2020-13460İstismar yok	Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack, affecting all versions prior to R20-2 GA.tufin · securetrack · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,5	9 Şub 2021
24İzleyin	CVE-2020-13133İstismar yok	Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS.tufin · securechange · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,7	19 Oca 2021
23İzleyin	CVE-2020-13408İstismar yok	Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the tufin · securetrack · CWE-79 XSS	Orta5,9	—	%0,4	9 Şub 2021
23İzleyin	CVE-2020-13407İstismar yok	Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the tufin · securetrack · CWE-79 XSS	Orta5,9	—	%0,4	9 Şub 2021
23İzleyin	CVE-2020-13409İstismar yok	Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the tufin · securetrack · CWE-79 XSS	Orta5,9	—	%0,4	9 Şub 2021
22İzleyin	CVE-2020-13462İstismar yok	Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA.tufin · securetrack · CWE-639 Erişim denetimi (IDOR)	Orta5,7	—	%0,4	9 Şub 2021
19İzleyin	CVE-2020-13134İstismar yok	Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS.tufin · securechange · CWE-79 XSS	Orta4,8	—	%0,5	19 Oca 2021
17İzleyin	CVE-2020-13461İstismar yok	Username enumeration in present in Tufin SecureTrack.tufin · securetrack Kimlik doğrulamasız	Orta4,3	—	%0,5	9 Şub 2021

CVE-2018-18406
40Planlayın
An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final).
KritikCVSS 9,9İstismar yokEPSS %1
- XXE
tufin · securetrack19 Haz 2019
CVE-2020-13460
35İzleyin
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack, affecting all versions prior to R20-2 GA.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
tufin · securetrack9 Şub 2021
CVE-2020-13133
24İzleyin
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS.
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
tufin · securechange19 Oca 2021
CVE-2020-13408
23İzleyin
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the
OrtaCVSS 5,9İstismar yokEPSS %0
- XSS
tufin · securetrack9 Şub 2021
CVE-2020-13407
23İzleyin
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the
OrtaCVSS 5,9İstismar yokEPSS %0
- XSS
tufin · securetrack9 Şub 2021
CVE-2020-13409
23İzleyin
Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the
OrtaCVSS 5,9İstismar yokEPSS %0
- XSS
tufin · securetrack9 Şub 2021
CVE-2020-13462
22İzleyin
Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA.
OrtaCVSS 5,7İstismar yokEPSS %0
- Erişim denetimi (IDOR)
tufin · securetrack9 Şub 2021
CVE-2020-13134
19İzleyin
Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS.
OrtaCVSS 4,8İstismar yokEPSS %0
- XSS
tufin · securechange19 Oca 2021
CVE-2020-13461
17İzleyin
Username enumeration in present in Tufin SecureTrack.
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
tufin · securetrack9 Şub 2021