CiviCRM

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

CiviCRM records in CISA KEV

No CiviCRM vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Civicrm 10 records MEDIUM Civicrm Private Report 1 record LOW

Records

1 record in Civicrm Private Report · all components

TI-2015-03689 CVE-2015-4391 · GHSA-8538-gf79-3qm7

Cross-site request forgery (CSRF) vulnerability in the CiviCRM private report module…

LOW 31

Cross-site request forgery (CSRF) vulnerability in the CiviCRM private report module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to hijack the authentication of users for requests…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00643 Published 2015-06-15 No fix listed CWE-352

Open these records in search →

Critical	1
High	3
Medium	8
Low	0
No CVSS	0