xpand-it kayıtları
xpand-it üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-307 Improper Restriction of Excessive Authentication Attempts1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-798 Use of Hard-coded Credentials1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-27168İstismar yok | An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp fixpand-it · write-back manager · CWE-434 | Kritik9,8 | — | %1,3 | 19 Oca 2024 |
36İzleyin | CVE-2023-27172İstismar yok | Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens.xpand-it · write-back manager · CWE-307 | Kritik9,1 | — | %0,7 | 19 Ara 2023 |
30İzleyin | CVE-2023-27170İstismar yok | Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter.xpand-it · write-back manager · CWE-22 | Yüksek7,5 | — | %0,9 | 26 Eki 2023 |
26İzleyin | CVE-2023-27169İstismar yok | Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and prexpand-it · write-back manager · CWE-798 | Orta6,5 | — | %0,3 | 12 Eyl 2023 |
21İzleyin | CVE-2019-19678İstismar yok | In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point viaxpand-it · xray test mangaement · CWE-79 | Orta5,4 | — | %0,6 | 9 Ara 2019 |
21İzleyin | CVE-2019-19679İstismar yok | In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry pxpand-it · xray test mangaement · CWE-79 | Orta5,4 | — | %0,6 | 9 Ara 2019 |
- CVE-2023-2716839İzleyin
An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp fi
KritikCVSS 9,8İstismar yokEPSS %1xpand-it · write-back manager19 Oca 2024
- CVE-2023-2717236İzleyin
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens.
KritikCVSS 9,1İstismar yokEPSS %1xpand-it · write-back manager19 Ara 2023
- CVE-2023-2717030İzleyin
Xpand IT Write-back manager v2.3.1 allows attackers to perform a directory traversal via modification of the siteName parameter.
YüksekCVSS 7,5İstismar yokEPSS %1xpand-it · write-back manager26 Eki 2023
- CVE-2023-2716926İzleyin
Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and pre
OrtaCVSS 6,5İstismar yokEPSS %0xpand-it · write-back manager12 Eyl 2023
- CVE-2019-1967821İzleyin
In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via
OrtaCVSS 5,4İstismar yokEPSS %1xpand-it · xray test mangaement9 Ara 2019
- CVE-2019-1967921İzleyin
In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry p
OrtaCVSS 5,4İstismar yokEPSS %1xpand-it · xray test mangaement9 Ara 2019