Capexweb Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Capexweb Project records in CISA KEV

No Capexweb Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Capexweb · all components

TI-2020-15078 CVE-2020-24600 · GHSA-jpp3-4q7m-cc4g

MEDIUM 45

Shilpi CAPExWeb 1.1 allows SQL injection via a servlet/capexweb.cap_sendMail GET request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00891 Published 2022-12-26 No fix listed CWE-89