Dimo-crm

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Dimo-crm records in CISA KEV

No Dimo-crm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yellowbox Crm 4 records MEDIUM

Records

4 records in Yellowbox Crm · all components

TI-2019-10978 CVE-2019-14768 · GHSA-3xw6-3pf3-2m73

An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4…

MEDIUM 45

An Arbitrary File Upload issue in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to deploy a new WebApp WAR file to the Tomcat server via Path Traversal, allowing remote code exe…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04344 Published 2020-01-21 No fix listed CWE-22

TI-2019-10975 CVE-2019-14765 · GHSA-57rv-3w97-433r

Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4…

MEDIUM 40

Incorrect Access Control in AfficheExplorateurParam() in DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to use administrative controllers.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0114 Published 2020-01-21 No fix listed

TI-2019-10977 CVE-2019-14767 · GHSA-8xv3-84rr-j23r

In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and…

LOW 36

In DIMO YellowBox CRM before 6.3.4, Path Traversal in images/Apparence (dossier=../) and servletrecuperefichier (document=../) allows an unauthenticated user to download arbitrary files from the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01443 Published 2020-01-21 No fix listed CWE-22

TI-2019-10976 CVE-2019-14766 · GHSA-g47q-59qr-8mqr

Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard…

LOW 31

Path Traversal in the file browser of DIMO YellowBox CRM before 6.3.4 allows a standard authenticated user to browse the server filesystem.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01059 Published 2020-01-21 No fix listed CWE-22

Open these records in search →

Critical	0
High	3
Medium	1
Low	0
No CVSS	0