Iblsoft

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Iblsoft records in CISA KEV

No Iblsoft vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2020-07522 CVE-2020-9406 · GHSA-6g6p-6ppw-xxv2

MEDIUM 45

IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01227 Published 2020-02-25 No fix listed CWE-94

TI-2020-07521 CVE-2020-9405 · GHSA-wgrx-pwq8-49g7

LOW 28

IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00614 Published 2020-02-25 No fix listed CWE-79

TI-2020-07523 CVE-2020-9407 · GHSA-937q-gmj4-gvh5

LOW 25

IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0052 Published 2020-02-25 No fix listed CWE-312