Hyweb

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Hyweb records in CISA KEV

No Hyweb vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Hycms-j1 · all components

TI-2021-05708 CVE-2021-22847 · GHSA-2hjx-vpw3-qh3w

MEDIUM 41

Hyweb HyCMS-J1's API fail to filter POST request parameters.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01658 Published 2021-01-22 No fix listed CWE-89

TI-2021-05710 CVE-2021-22849 · GHSA-j57c-7v46-28f4

LOW 25

Hyweb HyCMS-J1 backend editing function does not filter special characters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00516 Published 2021-01-22 No fix listed CWE-79