Exlibrisgroup

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Exlibrisgroup records in CISA KEV

No Exlibrisgroup vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Aleph 500 3 records MEDIUM

Records

3 records in Aleph 500 · all components

TI-2014-03033 CVE-2014-3719 · GHSA-gmmh-3g4p-ff75

Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500…

MEDIUM 46

Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the (1) find, (2) lib,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0199 Published 2020-01-30 No fix listed CWE-89

TI-2014-03032 CVE-2014-3718 · GHSA-h5qj-28x8-2vqr

Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris…

LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20 allow remote attackers to inject arbitrary web script or HTML via the (1)…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00968 Published 2020-01-30 No fix listed CWE-79

TI-2022-08115 CVE-2022-24177 · GHSA-358j-rpm7-39m5

A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris…

LOW 28

A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows attackers to execute arbitrary web scripts or HTML.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2022-03-07 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0