ibexa

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

ibexa records in CISA KEV

No ibexa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ez Platform Kernel 7 records MEDIUM Digital Experience Platform 3 records MEDIUM Ez Platform 3 records LOW Kernel 2 records MEDIUM Commerce 1 record LOW Ezplatform-graphql 1 record MEDIUM Ezplatform-http-cache-fastly 1 record MEDIUM Ezplatform-page-builder 1 record LOW

Records

1 record in Ezplatform-graphql · all components

TI-2022-20217 CVE-2022-41876 · GHSA-c7pc-pgf6-mfh5

ezplatform-graphql GraphQL queries can expose password hashes

MEDIUM 42

ezplatform-graphql is a GraphQL server implementation for Ibexa DXP and Ibexa Open Source.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0164 Published 2022-11-10 Fixed in 1.0.13, 2.3.12 CWE-200

Open these records in search →