Vendors / Accusoft Records 61 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 16 CVSS 9.0–10.0
CVSS high 42 CVSS 7.0–8.9
Exploited now Accusoft records in CISA KEV No Accusoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
Accusoft PrizmDoc HTML5 Document Viewer before 13.5 contains an XML external entity (XXE) vulnerability, allowing an attacker to read arbitrary files or cause a denial of service (resource consumption).
CVSS 3.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0163 · Published 2018-12-10 · No fix listed CWE-611
Priority LOW 28
Accusoft PrizmDoc version 13.3 and earlier contains a Stored Cross-Site Scripting issue through a crafted PDF file.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00724 · Published 2018-09-18 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical16 High42 Medium3 Low0 No CVSS0