Vendors / Archibus Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 2
Exploited now Archibus records in CISA KEV No Archibus vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), the Web Application in /archibus/login.axvw assign a session token that could be already in use by another user.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01243 · Published 2021-10-05 · No fix listed CWE-384
Priority MEDIUM 44
In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0106 · Published 2022-05-25 · No fix listed CWE-89
Priority MEDIUM 40
ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functionality in these affected endpoints: /archibus/schema/ab-edit-users.axvw, /archibus/schema/ab-data-di…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00875 · Published 2021-10-05 · No fix listed CWE-862
Priority LOW 39
An issue was discovered in Archibus Web Central 2022.03.01.107.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00662 · Published 2023-01-10 · No fix listed CWE-89
Priority LOW 29
An issue was discovered in Archibus Web Central 2022.03.01.107.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00494 · Published 2023-01-10 · No fix listed CWE-284
Priority LOW 29
In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkflowRule.dwr because the data received as input from clients is re-included within the HTTP response re…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0077 · Published 2021-10-05 · No fix listed CWE-79
Priority LOW 20
An issue was discovered in Archibus Web Central 2022.03.01.107.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00468 · Published 2023-01-10 · No fix listed CWE-200
Priority LOW 20
An issue was discovered in Archibus Web Central 2022.03.01.107.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00423 · Published 2023-01-10 · No fix listed CWE-284
Open these records in search → All records by CVSS severity
2 2 4 0 0
THREATIST.IORead the docs