Vendors / Cliniccases Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Cliniccases records in CISA KEV No Cliniccases vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
messages_load.php in ClinicCases 7.3.3 suffers from a blind SQL injection vulnerability, which allows low-privileged attackers to execute arbitrary SQL commands through a vulnerable parameter.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01029 · Published 2021-09-07 · No fix listed CWE-89
Priority LOW 39
ClinicCases 7.3.3 is affected by Cross-Site Request Forgery (CSRF).
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00769 · Published 2021-09-07 · No fix listed CWE-352
Priority LOW 33
Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03521 · Published 2021-09-07 · No fix listed CWE-79
Priority LOW 25
Persistent cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow low-privileged attackers to introduce arbitrary JavaScript to account parameters.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00644 · Published 2021-09-07 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 2 2 0 0
