Vendors / Easyvista Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Easyvista records in CISA KEV No Easyvista vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
Cross Site Scripting (XSS) vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the notes field.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00666 · Published 2022-10-20 · No fix listed CWE-79
Priority MEDIUM 44
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03.
CVSS 3.1 CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.00732 · Published 2023-01-10 · No fix listed CWE-89
Priority LOW 39
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00732 · Published 2023-01-10 · No fix listed CWE-89
Priority LOW 36
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03.
CVSS 3.1 HIGH 8.2· Network · No auth · No interaction · EPSS 0.00547 · Published 2023-01-10 · No fix listed CWE-307
Priority LOW 26
The single sign-on (SSO) implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified url_account parameter, in conjunction with a valid login name in the SSPI_HEADER par…
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01392 · Published 2012-02-22 · No fix listed CWE-287
Priority LOW 24
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting (XSS).
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00364 · Published 2023-01-10 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 3 0 0
THREATIST.IORead the docs