Invenio

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Invenio records in CISA KEV

No Invenio vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2021-19588 CVE-2021-43781 · GHSA-xr38-w74q-r8jv

LOW 30

Invenio-Drafts-Resources is a submission/deposit module for Invenio, a software framework for research data management.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00684 Published 2021-12-06 Fixed in 0.13.7, 0.14.6 +4 CWE-862

TI-2019-16097 CVE-2019-1020019 · GHSA-j9m2-6hq2-4r3c

LOW 29

invenio-previewer before 1.0.0a12 allows XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00899 Published 2019-07-29 Fixed in 1.0.0a12 CWE-79

TI-2019-16084 CVE-2019-1020006 · GHSA-94mf-xfg5-r247

LOW 29

invenio-app before 1.1.1 allows host header injection.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0093 Published 2019-07-29 Fixed in 1.1.1, 1.0.6 CWE-74

TI-2019-16083 CVE-2019-1020005 · GHSA-mfv8-q39f-mgfg

LOW 26

invenio-communities before 1.0.0a20 allows XSS.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00682 Published 2019-07-29 Fixed in 1.0.0a20 CWE-79

TI-2019-16081 CVE-2019-1020003 · GHSA-vxh3-mvv7-265j

LOW 26

invenio-records before 1.2.2 allows XSS.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00665 Published 2019-07-29 Fixed in 1.2.2, 1.0.2 +1 CWE-79