TI-2021-09115 CVE-2021-27670 · GHSA-3qwh-w55v-784g
Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.
Priority HIGH 77
Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.
Appspace
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Appspace records in CISA KEVNo Appspace vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2021-09294 CVE-2021-27990 · GHSA-hwm9-2683-r7jg
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as…
Priority LOW 36
Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities.
TI-2021-09133 CVE-2021-27704 · GHSA-pvp4-m7wj-rwq3
Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page.
Priority LOW 29
Appspace 6.2.4 is affected by Incorrect Access Control via the Appspace Web Portal password reset page.
TI-2020-04440 CVE-2020-5393 · GHSA-rfpg-5qm4-95q2
In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS.
Priority LOW 28
In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS.
TI-2021-09293 CVE-2021-27989 · GHSA-42vc-95ph-qmgq
Appspace 6.2.4 is vulnerable to stored cross-site scripting (XSS) in multiple parameters…
Priority LOW 25
Appspace 6.2.4 is vulnerable to stored cross-site scripting (XSS) in multiple parameters within /medianet/sgcontentset.aspx.
TI-2021-09020 CVE-2021-27564 · GHSA-9pcq-r26w-9482
A stored XSS issue exists in Appspace 6.2.4.
Priority LOW 25
A stored XSS issue exists in Appspace 6.2.4.