Read the docs

EBM Technologies

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

EBM Technologies records in CISA KEV

No EBM Technologies vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Risweb 2 records MEDIUM Uniweb/solipacs Webserver 1 record MEDIUM

Records

2 records in Risweb · all components

TI-2024-17349 CVE-2024-26264 · GHSA-7fvc-6vcj-hq22

EBM Technologies RISWEB - SQL Injection

Priority MEDIUM 50

EBM Technologies RISWEB's specific query function parameter does not properly restrict user input, and this feature page is accessible without login.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00848 Published 2024-02-15 No fix listed CWE-89
TI-2024-17348 CVE-2024-26263 · GHSA-qmmj-jp9v-hhrm

EBM Technologies RISWEB - Improper Access Control

Priority LOW 39

EBM Technologies RISWEB's specific URL path is not properly controlled by permission, allowing attackers to browse specific pages and query sensitive data without login.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0042 Published 2024-02-15 No fix listed CWE-306
Open these records in search →