Vendors / Assetman Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Assetman records in CISA KEV No Assetman vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 34
SQL injection vulnerability in search_inv.php in Assetman 2.5b allows remote attackers to execute arbitrary SQL commands and conduct session fixation attacks via a combination of crafted order and order_by parameters in…
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01978 · Published 2008-09-22 · No fix listed CWE-89
Priority LOW 28
Directory traversal vulnerability in download_pdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbitrary files via a ..
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03059 · Published 2007-03-13 · No fix listed
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0