Ict

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ict records in CISA KEV

No Ict vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Protege Gx 1 record LOW Protege Gx Firmware 1 record LOW Protege Wx 1 record LOW Protege Wx Firmware 1 record LOW

Records

2 records

TI-2022-12128 CVE-2022-29734 · GHSA-xxhf-rfmq-fqmc

A cross-site scripting (XSS) vulnerability in ICT Protege GX/WX v2.08 allows…

LOW 25

A cross-site scripting (XSS) vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00489 Published 2022-05-27 No fix listed CWE-79

TI-2022-12125 CVE-2022-29731 · GHSA-78m8-hfv5-fgfv

An access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users.

LOW 20

An access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00429 Published 2022-05-27 No fix listed CWE-916

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0