Aat

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Aat records in CISA KEV

No Aat vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Novus Management System · all components

TI-2021-13812 CVE-2021-34820 · GHSA-w7v3-fvcf-rfw3

MEDIUM 40

Web Path Directory Traversal in the Novus HTTP Server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03998 Published 2021-07-19 No fix listed CWE-22

TI-2021-13813 CVE-2021-34821 · GHSA-c893-g5w3-m4cj

LOW 29

Cross Site Scripting (XSS) vulnerability exists in AAT Novus Management System through 1.51.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00816 Published 2021-07-19 No fix listed CWE-79