Read the docs

Evernote

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

Evernote records in CISA KEV

No Evernote vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Web Clipper · all components

Priority LOW 29

A universal Cross-site scripting (UXSS) vulnerability in the Evernote Web Clipper extension before 7.11.1 for Chrome allows remote attackers to run arbitrary web script or HTML in the context of any loaded 3rd-party IFra…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01076 Published 2019-06-18 No fix listed CWE-79
Open these records in search →