Vendors / Echa.europa Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Echa.europa records in CISA KEV No Echa.europa vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
A vulnerability, which was classified as critical, was found in European Chemicals Agency IUCLID 7.10.3 on Windows.
CVSS 3.1 HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00278 · Published 2024-01-21 · No fix listed CWE-276
Priority MEDIUM 51
European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01073 · Published 2023-05-02 · No fix listed CWE-798
Priority MEDIUM 43
European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injection (SSTI) with a crafted template file.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0144 · Published 2023-05-02 · No fix listed CWE-94
Open these records in search → All records by CVSS severity
1 2 0 0 0
