Bscw

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Bscw records in CISA KEV

No Bscw vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bscw Classic 2 records MEDIUM Bscw 1 record LOW

Records

2 records in Bscw Classic · all components

TI-2021-14716 CVE-2021-36359 · GHSA-764h-r5xf-7cf5

OrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenticated remote code execution…

MEDIUM 45

OrbiTeam BSCW Classic before 7.4.3 allows exportpdf authenticated remote code execution (RCE) via XML tag injection because reportlab\platypus\paraparser.py (reached via bscw.cgi op=_editfolder.EditFolder) calls eval on…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03975 Published 2021-08-30 No fix listed CWE-91

TI-2021-16652 CVE-2021-39271 · GHSA-v6w5-67rj-72w9

OrbiTeam BSCW Classic before 7.4.3 allows authenticated remote code execution (RCE)…

MEDIUM 44

OrbiTeam BSCW Classic before 7.4.3 allows authenticated remote code execution (RCE) during archive extraction via attacker-supplied Python code in the class attribute of a .bscw file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03679 Published 2021-08-30 No fix listed

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0