TI-2022-06458 CVE-2022-22111 · GHSA-w6rp-4vj7-v2m8
DayByDay CRM - Missing Authorization when Changing Password
Priority MEDIUM 40
In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization.
Bottelet
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Bottelet records in CISA KEVNo Bottelet vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Daybyday Crm · all components
TI-2022-06457 CVE-2022-22110 · GHSA-96v6-hrwg-p378
DayByDay CRM - Weak Password Requirements in Update User
Priority LOW 35
In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality.
TI-2022-06456 CVE-2022-22109 · GHSA-jr37-66pj-36v7
DayByDay CRM - Stored Cross-Site Scripting (XSS) in Task Title
Priority LOW 25
In Daybyday CRM, version 2.2.0 is vulnerable to Stored Cross-Site Scripting (XSS) vulnerability that allows low privileged application users to store malicious scripts in the title field of new tasks.
TI-2022-06455 CVE-2022-22108 · GHSA-frxp-xxx8-hrg6
DayByDay CRM - Missing Authorization when Viewing Absences
Priority LOW 21
In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization.
TI-2022-06454 CVE-2022-22107 · GHSA-44gv-fgcj-w546
DayByDay CRM - Missing Authorization when Viewing Appointments
Priority LOW 21
In Daybyday CRM, versions 2.0.0 through 2.2.0 are vulnerable to Missing Authorization.