Baidu

Records22All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Baidu records in CISA KEV

No Baidu vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Ueditor · all components

TI-2024-06804 CVE-2024-7343 · GHSA-x6qr-qghp-2wfr

MEDIUM 57

A vulnerability was found in Baidu UEditor 1.4.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00453 Published 2024-08-01 No fix listed CWE-79

TI-2024-06803 CVE-2024-7342 · GHSA-rr2m-vxfp-vgm4

MEDIUM 57

A vulnerability was found in Baidu UEditor 1.4.3.3.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00453 Published 2024-08-01 No fix listed CWE-434

TI-2017-10807 CVE-2017-14744 · GHSA-8949-pxh3-9x3f

LOW 28

UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00635 Published 2017-09-26 No fix listed CWE-79

TI-2021-15292 CVE-2021-37271 · GHSA-wj6j-v4x2-wj65

LOW 25

Cross Site Scripting (XSS) vulnerability exists in UEditor v1.4.3.3, which can be exploited by an attacker to obtain user cookie information.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00562 Published 2021-09-28 No fix listed CWE-79