Bloomreach

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Bloomreach records in CISA KEV

No Bloomreach vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2020-11786 CVE-2020-14987 · GHSA-59pc-38q9-x2p3

LOW 38

An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03644 Published 2021-03-11 No fix listed CWE-74

TI-2020-11788 CVE-2020-14989 · GHSA-pr32-qm3r-fmqr

LOW 30

An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0059 Published 2021-03-11 No fix listed CWE-352

TI-2020-11787 CVE-2020-14988 · GHSA-cq64-gmxm-xq9m

LOW 25

An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00599 Published 2021-03-11 No fix listed CWE-79