CEMI Tomasz Pawełek

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

CEMI Tomasz Pawełek records in CISA KEV

No CEMI Tomasz Pawełek vulnerabilities are listed in CISA KEV.

3 records

TI-2024-04113 CVE-2024-4423 · GHSA-wr86-8vhj-7qx5

LOW 35

The access control in CemiPark software does not properly validate user-entered data, which allows the authentication bypass.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00907 Published 2024-05-09 No fix listed CWE-89

TI-2024-04114 CVE-2024-4424 · GHSA-33xc-pj2q-h2rm

LOW 28

The access control in CemiPark software does not properly validate user-entered data, which allows the stored cross-site scripting (XSS) attack.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0043 Published 2024-05-09 No fix listed CWE-79

TI-2024-04115 CVE-2024-4425 · GHSA-vcx5-gghv-x2hh

LOW 25

The access control in CemiPark software stores integration (e.g.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00394 Published 2024-05-09 No fix listed CWE-256