Read the docs

Emberjs

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Emberjs records in CISA KEV

No Emberjs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ember.js 6 records LOW

Records

6 records in Ember.js · all components

TI-2015-06292 CVE-2015-7565 · GHSA-m3q7-rj8g-m457

Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before…

Priority LOW 29

Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote a…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00816 Published 2017-04-13 Fixed in 1.11.4, 1.12.2 +4 CWE-79
TI-2013-03643 CVE-2013-4170 · GHSA-5m48-c37x-f792

Cross-site scripting in ember-source

Priority LOW 29

In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00942 Published 2022-06-30 Fixed in 1.0.0.rc1.1, 1.0.0.rc2.1 +4 CWE-79
TI-2014-00014 CVE-2014-0014 · GHSA-rcx6-7jp6-pqf2

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1…

Priority LOW 27

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application us…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01196 Published 2018-02-15 Fixed in 1.0.1, 1.1.3 +3 CWE-79
TI-2014-00013 CVE-2014-0013 · GHSA-8xm3-gm7c-5fjx

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1…

Priority LOW 26

Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging an application th…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00673 Published 2018-02-15 Fixed in 1.0.1, 1.1.3 +3 CWE-79
TI-2014-00044 CVE-2014-0046 · GHSA-4q53-fqhc-cr46

Cross-site scripting (XSS) vulnerability in the link-to helper in Ember.js 1.2.x before…

Priority LOW 16

Cross-site scripting (XSS) vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before 1.4.0-beta.6, when used in non-block form, allows remote attackers to inject arbitrary w…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01503 Published 2014-02-27 Fixed in 1.2.2, 1.3.2 +1 CWE-79
Open these records in search →