Crk

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Crk records in CISA KEV

No Crk vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Business Platform · all components

TI-2020-10942 CVE-2020-13968 · GHSA-q768-rrh4-6p7h

MEDIUM 45

CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01356 Published 2020-12-23 No fix listed CWE-89

TI-2020-10943 CVE-2020-13969 · GHSA-fw96-xwr9-54ff

LOW 28

CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00668 Published 2020-12-23 No fix listed CWE-79