Beekeeper Studio, Inc.

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Beekeeper Studio, Inc. records in CISA KEV

No Beekeeper Studio, Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Beekeeper-studio 3 records HIGH

Records

3 records

TI-2022-21052 CVE-2022-43143 · GHSA-gh54-fxmf-wwvq

A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to…

HIGH 76

A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the error modal container.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0093 Published 2022-11-21 No fix listed CWE-79

TI-2022-09617 CVE-2022-26174 · GHSA-fvmg-rxw4-v65c

A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers…

MEDIUM 47

A remote code execution (RCE) vulnerability in Beekeeper Studio v3.2.0 allows attackers to execute arbitrary code via a crafted payload injected into the display fields.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02422 Published 2022-03-21 No fix listed CWE-116

TI-2023-12940 CVE-2023-28394 · GHSA-wcc7-8mhx-xfg9

OS command injection in Beekeeper Studio

MEDIUM 43

Beekeeper Studio versions prior to 3.9.9 allows a remote authenticated attacker to execute arbitrary JavaScript code with the privilege of the application on the PC where the affected product is installed.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01388 Published 2023-05-23 Fixed in 3.9.9 CWE-78

Open these records in search →

Critical	2
High	1
Medium	0
Low	0
No CVSS	0