Vendors / Aceware Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Aceware records in CISA KEV No Aceware vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
ACEweb Online Portal 3.5.065 was discovered to contain a SQL injection vulnerability via the criteria parameter in showschedule.awp.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00955 · Published 2022-05-27 · No fix listed CWE-89
Priority MEDIUM 44
ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01074 · Published 2022-05-27 · No fix listed CWE-434
Priority LOW 35
ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00974 · Published 2022-05-27 · No fix listed CWE-434
Priority LOW 35
ACEweb Online Portal 3.5.065 was discovered to contain an External Controlled File Path and Name vulnerability via the txtFilePath parameter in attachments.awp.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00974 · Published 2022-05-27 · No fix listed CWE-610
Priority LOW 28
ACEweb Online Portal 3.5.065 was discovered to contain a cross-site scripting (XSS) vulnerability via the txtNmName1 parameter in person.awp.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00574 · Published 2022-05-27 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 2 1 0 0
THREATIST.IORead the docs