Vendors / Elvaco Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 3
Exploited now Elvaco records in CISA KEV No Elvaco vulnerabilities are listed in CISA KEV.
Priority MEDIUM 45
The affected product is vulnerable to unrestricted file uploads, which may allow an attacker to remotely execute code.
CVSS 4.0 HIGH 8.8· Network · No auth · No interaction · EPSS 0.0052 · Published 2024-10-17 · No fix listed CWE-434
Priority MEDIUM 44
The affected product is vulnerable to an attacker being able to use commands without providing a password which may allow an attacker to leak information.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00387 · Published 2024-10-17 · No fix listed CWE-306
Priority MEDIUM 44
The affected product is vulnerable due to insufficiently protected credentials, which may allow an attacker to impersonate Elvaco and send false information.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00387 · Published 2024-10-17 · No fix listed CWE-522
Priority MEDIUM 42
The affected product is vulnerable to a cross-site scripting attack which may allow an attacker to bypass authentication and takeover admin accounts.
CVSS 4.0 CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00382 · Published 2024-10-17 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 3 0 0 0
THREATIST.IORead the docs