Grandingteco

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Grandingteco records in CISA KEV

No Grandingteco vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Utime Master 2 records MEDIUM

Records

2 records

TI-2023-24344 CVE-2023-45393 · GHSA-fr4c-rcw2-hh8p

An indirect object reference (IDOR) in GRANDING UTime Master v9.0.7-Build:Apr 4,2023…

MEDIUM 62

An indirect object reference (IDOR) in GRANDING UTime Master v9.0.7-Build:Apr 4,2023 allows authenticated attackers to access sensitive information via a crafted cookie.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00583 Published 2023-10-13 No fix listed CWE-639

TI-2023-24343 CVE-2023-45391 · GHSA-542f-549f-58vm

A stored cross-site scripting (XSS) vulnerability in the Create A New Employee function…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the Create A New Employee function of Granding UTime Master v9.0.7-Build:Apr 4,2023 allows authenticated attackers to execute arbitrary web scripts or HTML via a craft…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00406 Published 2023-10-13 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0