1c

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

1c records in CISA KEV

No 1c vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in 1c · all components

TI-2021-02223 CVE-2021-3131 · GHSA-g9qv-25h9-wcvw

LOW 35

The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00973 Published 2021-01-13 No fix listed CWE-326