Read the docs

Ártica

Records74All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high37CVSS 7.0–8.9

Exploited now

Ártica records in CISA KEV

No Ártica vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records in Integria Ims · all components

TI-2021-02763 CVE-2021-3832 · GHSA-39p6-6vvx-xcqg

Integria IMS Remote Code Execution

Priority MEDIUM 46

Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02254 Published 2021-10-07 No fix listed CWE-434
Priority MEDIUM 45

filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01554 Published 2019-08-16 No fix listed CWE-434
TI-2021-02764 CVE-2021-3833 · GHSA-5pf8-m5c6-qc44

Integria IMS incorrect authorization

Priority MEDIUM 44

Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01119 Published 2021-10-07 No fix listed CWE-697
Priority LOW 39

Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recovery process, line 45 of general/password…

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01985 Published 2018-12-20 No fix listed CWE-640
Priority LOW 28

Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00586 Published 2021-10-07 No fix listed CWE-79
Open these records in search →