Read the docs

Archibus

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Archibus records in CISA KEV

No Archibus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Web Central 5 records MEDIUM Archibus Web Central 3 records LOW

Records

5 records in Web Central · all components

TI-2021-18291 CVE-2021-41554 · GHSA-4fg8-hr8g-58rr

ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests…

Priority MEDIUM 40

ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functionality in these affected endpoints: /archibus/schema/ab-edit-users.axvw, /archibus/schema/ab-data-di…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00875 Published 2021-10-05 No fix listed CWE-862
TI-2021-18292 CVE-2021-41555 · GHSA-h6fx-jmr6-xg2g

In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in…

Priority LOW 29

In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkflowRule.dwr because the data received as input from clients is re-included within the HTTP response re…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0077 Published 2021-10-05 No fix listed CWE-79
Open these records in search →