Read the docs

Evasys

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Evasys records in CISA KEV

No Evasys vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records

Priority HIGH 70

Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire previews) in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allow authenticated attackers…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00702 Published 2023-05-02 No fix listed CWE-863
Priority LOW 25

The parameters nutzer_titel, nutzer_vn, and nutzer_nn in the user profile, and langID and ONLINEID in direct links, in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 do not validate input, which allows authen…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00468 Published 2023-05-02 No fix listed CWE-79
Open these records in search →