Bedita

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Bedita records in CISA KEV

No Bedita vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bedita 4 records MEDIUM

Records

4 records

TI-2019-11670 CVE-2019-15570 · GHSA-9gv2-2m38-j6cx

BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters.

MEDIUM 45

BEdita through 4.0.0-RC2 allows SQL injection during a save operation for a relation with parameters.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01451 Published 2019-08-26 Fixed in 4.0.0 CWE-89

TI-2015-07639 CVE-2015-9260 · GHSA-69gq-9gm7-p5m5

An issue was discovered in BEdita before 3.7.0.

LOW 26

An issue was discovered in BEdita before 3.7.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00984 Published 2018-07-05 No fix listed CWE-79

TI-2015-05710 CVE-2015-6809 · GHSA-4p9p-g6c8-9x7p

Multiple cross-site scripting (XSS) vulnerabilities in BEdita before 3.6.0 allow remote…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) cfg[projectName] parameter to index.php/admin/saveConfig, the (2) data[…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03642 Published 2015-09-04 No fix listed CWE-79

TI-2015-00937 CVE-2015-1040 · GHSA-c5hh-9w58-4367

Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in…

LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in BEdita 3.4.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lrealname field in the editProfile for…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01618 Published 2015-01-15 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	1
No CVSS	0