Vendors / Axiomsl Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Axiomsl records in CISA KEV No Axiomsl vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
AxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated Java RMI services) 9.5.3 and earlier allows remote attackers to (1) access data of other basic users through arbitrary SQL commands…
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02031 · Published 2019-04-03 · No fix listed CWE-285
Priority MEDIUM 41
AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01525 · Published 2019-04-03 · No fix listed CWE-384
Priority LOW 29
AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject HTML into the scoping dashboard features.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0103 · Published 2019-04-03 · No fix listed CWE-74
Open these records in search → All records by CVSS severity
1 1 1 0 0
