CHANGING

Records42All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high21CVSS 7.0–8.9

Exploited now

CHANGING records in CISA KEV

No CHANGING vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Rava Certificate Validation System · all components

TI-2022-18448 CVE-2022-39056 · GHSA-v8x9-hfxx-9g25

MEDIUM 51

RAVA certificate validation system has insufficient validation for user input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0096 Published 2022-10-18 No fix listed CWE-89

TI-2022-18450 CVE-2022-39058 · GHSA-j8m8-g7pf-5jxh

MEDIUM 43

RAVA certification validation system has a path traversal vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02157 Published 2022-10-18 No fix listed CWE-22

TI-2022-18449 CVE-2022-39057 · GHSA-cp7v-6jp7-gpwm

LOW 35

RAVA certificate validation system has insufficient filtering for special parameter of the web page input field.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00866 Published 2022-10-18 No fix listed CWE-78

TI-2022-18447 CVE-2022-39055 · GHSA-p69p-2m86-g334

LOW 31

RAVA certificate validation system has inadequate filtering for URL parameter.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00526 Published 2022-10-18 No fix listed CWE-918