Inedo

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Inedo records in CISA KEV

No Inedo vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Buildmaster · all components

TI-2017-12133 CVE-2017-16521 · GHSA-m99p-q5j3-rj3r

MEDIUM 46

In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02022 Published 2017-11-10 No fix listed

TI-2017-12132 CVE-2017-16520 · GHSA-6wp7-j652-q3wq

LOW 35

Inedo BuildMaster before 5.8.2 does not properly restrict creation of RequireManageAllPrivileges event listeners.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01057 Published 2017-11-11 No fix listed CWE-269

TI-2017-12321 CVE-2017-16761 · GHSA-8qp4-8xw3-4g95

LOW 29

An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary web sites.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01039 Published 2017-11-10 No fix listed CWE-601

TI-2017-12320 CVE-2017-16760 · GHSA-cgcw-6836-mc74

LOW 28

Inedo BuildMaster before 5.8.2 has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2017-11-10 No fix listed CWE-79