Comersus Open Technologies

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Comersus Open Technologies records in CISA KEV

No Comersus Open Technologies vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Comersus Cart 9 records MEDIUM Comersus Backoffice Lite 4 records LOW Comersus Backoffice Plus 2 records LOW

Records

2 records in Comersus Backoffice Plus · all components

TI-2005-03110 CVE-2005-3285 · GHSA-mwrf-3p8f-jpjf

Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in…

LOW 26

Cross-site scripting (XSS) vulnerability in comersus_backoffice_searchItemForm.asp in Comersus BackOffice Plus allows remote attackers to inject arbitrary web script or HTML via the (1) forwardTo1, (2) forwardTo2, (3) na…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03472 Published 2005-10-23 No fix listed

TI-2005-03221 CVE-2005-3397 · GHSA-3gpq-hwqc-v65w

Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers…

LOW 23

Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01394 Published 2005-11-01 No fix listed

Open these records in search →

Critical	0
High	5
Medium	9
Low	0
No CVSS	0