Brassica

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Brassica records in CISA KEV

No Brassica vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Soy Cms · all components

TI-2020-11960 CVE-2020-15188

MEDIUM 51

SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated Remote Code Execution (RCE).

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.05083 Published 2020-09-18 Fixed in 3.0.2.328 CWE-502

TI-2019-08498 CVE-2019-11376 · GHSA-gvjh-v5q9-73c3

LOW 38

SOY CMS v3.0.2 allows remote attackers to execute arbitrary PHP code via a <?php substring in the second text box.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02226 Published 2019-04-20 No fix listed CWE-94

TI-2020-11961 CVE-2020-15189

LOW 37

SOY CMS 3.0.2 and earlier is affected by Remote Code Execution (RCE) using Unrestricted File Upload.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02807 Published 2020-09-18 Fixed in 3.0.2.328 CWE-434