Intuit

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Intuit records in CISA KEV

No Intuit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Quickbooks 12 records HIGH Lacerte 2 records LOW Turbo Tax 2 records HIGH Bookkeeping 1 record HIGH Proseries 1 record HIGH Quicken 1 record HIGH Quicken 2018 1 record LOW Quicktax 1 record HIGH

Records

12 records in Quickbooks · all components

TI-2007-06093 CVE-2007-6387 · GHSA-2jwm-jwrw-97qp

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in…

HIGH 67

Multiple stack-based buffer overflows in the awApi4.AnswerWorks.1 ActiveX control in awApi4.dll 4.0.0.42, as used by Vantage Linguistics AnswerWorks, and Intuit Clearly Bookkeeping, ProSeries, QuickBooks, Quicken, QuickT…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.38031 Published 2007-12-15 No fix listed CWE-119

TI-2007-00313 CVE-2007-0322 · GHSA-hqxc-2hr2-hw69

Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX…

MEDIUM 49

Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05971 Published 2007-09-05 No fix listed CWE-119

TI-2007-04329 CVE-2007-4471 · GHSA-66jg-p3fh-9w8p

Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX…

MEDIUM 48

Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or overwrite arbitrary files via unspecified arguments to the (1) httpGETToFile, (2)…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05155 Published 2007-09-05 No fix listed CWE-22

TI-2012-02144 CVE-2012-2418 · GHSA-89g7-q4h7-vjxh

Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable…

LOW 36

Heap-based buffer overflow in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows r…

CVSS 2.0MEDIUM 6.8 Adjacent network No auth Interaction — EPSS 0.03171 Published 2012-04-25 No fix listed CWE-119

TI-2010-04896 CVE-2010-5198 · GHSA-xhh9-cvv8-mf7q

Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local…

LOW 30

Multiple untrusted search path vulnerabilities in Intuit QuickBooks 2010 allow local users to gain privileges via a Trojan horse (1) dbicudtx11.dll, (2) mfc90enu.dll, or (3) mfc90loc.dll file in the current working direc…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00347 Published 2012-09-06 No fix listed

TI-2012-02148 CVE-2012-2422 · GHSA-vhw8-24fh-mq3v

Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname…

LOW 17

Intuit QuickBooks 2009 through 2012 might allow remote attackers to obtain pathname information via the qbwc://docontrol/GetCompanyFile functionality.

CVSS 2.0LOW 2.9 Adjacent network No auth Interaction — EPSS 0.01091 Published 2012-04-25 No fix listed CWE-200

TI-2012-02151 CVE-2012-2425 · GHSA-x4pj-xqp4-62g6

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in…

LOW 13

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allow remote attackers to cause a deni…

CVSS 2.0LOW 1.8 Adjacent network No auth Interaction — EPSS 0.01348 Published 2012-04-25 No fix listed CWE-20

TI-2012-02146 CVE-2012-2420 · GHSA-4gjp-wgmq-qr4c

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in…

LOW 13

CVSS 2.0LOW 1.8 Adjacent network No auth Interaction — EPSS 0.01303 Published 2012-04-25 No fix listed CWE-200

TI-2012-02150 CVE-2012-2424 · GHSA-vp6x-rh2w-5863

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in…

LOW 12

CVSS 2.0LOW 1.8 Adjacent network No auth Interaction — EPSS 0.01182 Published 2012-04-25 No fix listed

TI-2012-02149 CVE-2012-2423 · GHSA-5q64-3jhr-xr4j

The intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in…

LOW 12

CVSS 2.0LOW 1.8 Adjacent network No auth Interaction — EPSS 0.01086 Published 2012-04-25 No fix listed CWE-200

TI-2012-02145 CVE-2012-2419 · GHSA-374c-8gp8-mfvr

Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol)…

LOW 12

Memory leak in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is used, allows remote attackers…

CVSS 2.0LOW 1.8 Adjacent network No auth Interaction — EPSS 0.01046 Published 2012-04-25 No fix listed CWE-399

TI-2012-02147 CVE-2012-2421 · GHSA-c75m-655v-9rxc

Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async…

LOW 11

Absolute path traversal vulnerability in the intu-help-qb (aka Intuit Help System Async Pluggable Protocol) handlers in HelpAsyncPluggableProtocol.dll in Intuit QuickBooks 2009 through 2012, when Internet Explorer is use…

CVSS 2.0LOW 1.8 Adjacent network No auth Interaction — EPSS 0.00801 Published 2012-04-25 No fix listed CWE-22

Open these records in search →

Critical	3
High	2
Medium	4
Low	7
No CVSS	0