Read the docs

Eic

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Eic records in CISA KEV

No Eic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
E-document System 3 records MEDIUM Biyan 2 records MEDIUM

Records

5 records

TI-2021-05720 CVE-2021-22859 · GHSA-x9wv-c8jw-pvg5

EIC e-document system - SQL Injection

Priority MEDIUM 48

The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03751 Published 2021-03-17 No fix listed CWE-89
TI-2021-05721 CVE-2021-22860 · GHSA-whg3-7342-p9mg

EIC e-document system - Broken Authentication

Priority MEDIUM 47

EIC e-document system does not perform completed identity verification for sorting and filtering personnel data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02558 Published 2021-03-17 No fix listed CWE-287
TI-2019-08407 CVE-2019-11232 · GHSA-v55f-mqvf-hxcv

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information…

Priority MEDIUM 45

EXCELLENT INFOTEK BiYan v1.57 ~ v2.8 allows an attacker to leak user information (Password) without being authenticated, by sending an EMP_NO element to the kws_login/asp/query_user.asp URI, and then reading the PWD elem…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01533 Published 2019-06-19 No fix listed CWE-287
Open these records in search →