Ctrip

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Ctrip records in CISA KEV

No Ctrip vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2019-07976 CVE-2019-10686 · GHSA-fvx3-g627-phm2

MEDIUM 46

An SSRF vulnerability was found in an API from Ctrip Apollo through 1.4.0-SNAPSHOT.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01559 Published 2019-04-01 No fix listed CWE-918

TI-2020-11942 CVE-2020-15170 · GHSA-xpmx-h7xq-xffh

LOW 34

apollo-adminservice before version 1.7.1 does not implement access controls.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.01315 Published 2020-09-10 Fixed in 1.7.1 CWE-20