Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
07FLY records in CISA KEVNo 07FLY vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 58
A vulnerability was found in 07FLY CRM up to 1.2.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00564 · Published 2023-06-02 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as problematic was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.3.9.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00308 · Published 2025-07-06 · No fix listed CWE-352
Priority MEDIUM 56
A vulnerability classified as critical was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00628 · Published 2024-10-13 · No fix listed CWE-434
Priority MEDIUM 56
A vulnerability classified as critical has been found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 1.2.0.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00628 · Published 2024-10-12 · No fix listed CWE-434
Priority MEDIUM 56
A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00417 · Published 2024-10-11 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM 1.3.8.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00628 · Published 2024-10-11 · No fix listed CWE-434
Priority MEDIUM 53
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaWorkReport/edit.html
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00175 · Published 2025-01-16 · No fix listed CWE-352
Priority MEDIUM 53
07FLYCMS V1.3.9 was discovered to contain a Cross-Site Request Forgery (CSRF) via /erp.07fly.net:80/oa/OaTask/edit.html.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00175 · Published 2025-01-16 · No fix listed CWE-352
Priority MEDIUM 44
A vulnerability, which was classified as critical, has been found in 07FLY CRM V2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00819 · Published 2023-09-17 · No fix listed CWE-89
Open these records in search →