Erikwebb

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Erikwebb records in CISA KEV

No Erikwebb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Password Policy 3 records LOW

Records

3 records in Password Policy · all components

TI-2012-01422 CVE-2012-1633 · GHSA-v6gx-89ww-chv2

Cross-site request forgery (CSRF) vulnerability in the Password Policy module before…

LOW 31

Cross-site request forgery (CSRF) vulnerability in the Password Policy module before 6.x-1.4 and 7.x-1.0 beta3 for Drupal allows remote attackers to hijack the authentication of administrative users for requests that unb…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00697 Published 2012-09-20 No fix listed CWE-352

TI-2012-04669 CVE-2012-5552 · GHSA-qpr6-g969-fw4w

The Password policy module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.3 for Drupal…

LOW 26

The Password policy module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.3 for Drupal allows remote attackers to obtain password hashes by sniffing the network, related to "client-side password history checks."

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01369 Published 2012-12-03 No fix listed CWE-200

TI-2013-03740 CVE-2013-4274 · GHSA-phfm-5754-88wq

Cross-site scripting (XSS) vulnerability in the password_policy_admin_view function in…

LOW 13

Cross-site scripting (XSS) vulnerability in the password_policy_admin_view function in password_policy.admin.inc in the Password Policy module 6.x-1.x before 6.x-1.6 and 7.x-1.x before 7.x-1.5 for Drupal allows remote au…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.00973 Published 2013-08-28 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	1
No CVSS	0