Read the docs

HyperView

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

HyperView records in CISA KEV

No HyperView vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Geoportal Toolkit 2 records LOW

Records

2 records in Geoportal Toolkit · all components

TI-2024-05987 CVE-2024-6450 · GHSA-9c47-7pjp-gr57

Reflected XSS in HyperView Geoportal Toolkit

Priority LOW 24

HyperView Geoportal Toolkit in versions lower than 8.5.0 is vulnerable to Reflected Cross-Site Scripting (XSS).

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0032 Published 2024-08-28 Fixed in 8.5.0 CWE-79
TI-2024-05986 CVE-2024-6449 · GHSA-26rc-mj52-pcf5

Arbitrary cross-domain file inclusion in HyperView Geoportal Toolkit

Priority LOW 24

HyperView Geoportal Toolkit in versions lower than 8.5.0 does not restrict cross-domain requests when fetching remote content pointed by one of GET request parameters.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0035 Published 2024-08-28 Fixed in 8.5.0 CWE-942
Open these records in search →