Concept Intermedia

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Concept Intermedia records in CISA KEV

No Concept Intermedia vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in S@m Cms · all components

TI-2024-03560 CVE-2024-3816

MEDIUM 49

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to a blind SQL Injection executed using the search bar.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00483 Published 2024-06-28 No fix listed CWE-89

TI-2024-03547 CVE-2024-3801

LOW 27

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in one of GET header parameters.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00329 Published 2024-06-28 No fix listed CWE-79

TI-2024-03546 CVE-2024-3800

LOW 27

Sites managed in S@M CMS (Concept Intermedia) might be vulnerable to Reflected XSS via including scripts in requested file names.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00294 Published 2024-06-28 No fix listed CWE-79