Boodskap

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Boodskap records in CISA KEV

No Boodskap vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Iot Platform · all components

TI-2022-15855 CVE-2022-35135 · GHSA-6p9p-79qr-h76c

HIGH 73

Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/<uuid>.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00954 Published 2022-10-13 No fix listed CWE-287

TI-2022-15856 CVE-2022-35136 · GHSA-4r3g-w96h-5qxg

MEDIUM 62

Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00728 Published 2022-10-13 No fix listed CWE-306

TI-2022-15854 CVE-2022-35134 · GHSA-f8pv-g5wp-pv5c

MEDIUM 58

Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00545 Published 2022-10-13 No fix listed CWE-79