CERT/CC

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

CERT/CC records in CISA KEV

No CERT/CC vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Vince · all components

TI-2022-19099 CVE-2022-40238 · GHSA-9gw9-mrm5-m5x9

MEDIUM 43

A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01483 Published 2022-10-26 Fixed in 1.50.5 CWE-502

TI-2024-09697 CVE-2024-10469 · GHSA-59xx-g8cv-87qw

LOW 28

VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00183 Published 2024-10-28 Fixed in 3.0.9 CWE-276

TI-2022-09370 CVE-2022-25799 · GHSA-wjw7-pcj2-4prm

LOW 28

An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00602 Published 2022-08-16 Fixed in 1.50.0 CWE-601

TI-2022-19104 CVE-2022-40257 · GHSA-3g24-rv7h-5xh5

LOW 25

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00443 Published 2022-10-10 Fixed in 1.50.4 CWE-74

TI-2022-19102 CVE-2022-40248 · GHSA-hjm9-vw3p-4gv8

LOW 25

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00463 Published 2022-10-10 Fixed in 1.50.4 CWE-74

TI-2024-09236 CVE-2024-9953 · GHSA-gjpq-5jrr-h6wr

LOW 23

A potential denial-of-service (DoS) vulnerability exists in CERT VINCE software versions prior to 3.0.8.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00442 Published 2024-10-14 Fixed in 3.0.8 CWE-502