Vendors / Italtel Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 6
Exploited now Italtel records in CISA KEV No Italtel vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 80
Italtel NetMatch-S CI 5.2.0-20211008 has incorrect Access Control under NMSCI-WebGui/advancedsettings.jsp and NMSCIWebGui/SaveFileUploader.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00832 · Published 2023-01-27 · No fix listed CWE-862
Priority HIGH 72
Italtel NetMatch-S CI 5.2.0-20211008 allows Absolute Path Traversal under NMSCI-WebGui/SaveFileUploader.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00971 · Published 2023-01-27 · No fix listed CWE-22
Priority MEDIUM 60
Italtel NetMatch-S CI 5.2.0-20211008 allows Multiple Reflected/Stored XSS issues under NMSCIWebGui/j_security_check via the j_username parameter, or NMSCIWebGui/actloglineview.jsp via the name or actLine parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00475 · Published 2023-01-27 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 6 7 0 0
THREATIST.IORead the docs