TI-2018-15985 CVE-2018-1000631 · GHSA-h34f-jfj7-68j2
Battelle V2I Hub 3.0 is vulnerable to SQL injection.
Priority MEDIUM 47
Battelle V2I Hub 3.0 is vulnerable to SQL injection.
Battelle
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Battelle records in CISA KEVNo Battelle vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2018-15982 CVE-2018-1000628 · GHSA-3mgj-2f83-wr3q
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions…
Priority MEDIUM 47
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the direct checking of the API key against a user-supplied value in PHP's GET global variable array using PHP's strcmp() fun…
TI-2018-15980 CVE-2018-1000626 · GHSA-wjf4-qx4c-9q8h
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions…
Priority MEDIUM 47
Battelle V2I Hub 2.5.1 could allow a remote attacker to bypass security restrictions, caused by the lack of requirement to change the default API key.
TI-2018-15981 CVE-2018-1000627 · GHSA-h89g-92w5-6r7q
Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information…
Priority MEDIUM 46
Battelle V2I Hub 2.5.1 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict access to the API key file.
TI-2018-15979 CVE-2018-1000625 · GHSA-j3gq-75j7-7266
Battelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account.
Priority MEDIUM 46
Battelle V2I Hub 2.5.1 contains hard-coded credentials for the administrative account.
TI-2018-15978 CVE-2018-1000624 · GHSA-jf4r-98w7-6qr2
Battelle V2I Hub 2.5.1 is vulnerable to a denial of service, caused by the failure to…
Priority LOW 37
Battelle V2I Hub 2.5.1 is vulnerable to a denial of service, caused by the failure to restrict access to a sensitive functionality.
TI-2018-15984 CVE-2018-1000630 · GHSA-mg74-x7cm-fcp3
Battelle V2I Hub 2.5.1 is vulnerable to SQL injection.
Priority LOW 35
Battelle V2I Hub 2.5.1 is vulnerable to SQL injection.
TI-2018-15983 CVE-2018-1000629 · GHSA-3mgx-38jx-2wgw
Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper…
Priority LOW 30
Battelle V2I Hub 2.5.1 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by api/SystemConfigActions.php?action=add and the index.php script.