Itb-pim

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Itb-pim records in CISA KEV

No Itb-pim vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tradepro 3 records HIGH

Records

3 records

TI-2023-18461 CVE-2023-36644 · GHSA-9wj5-w226-r39m

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive…

HIGH 74

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all order confirmations from the online shop via the printmail plugin.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00955 Published 2024-04-04 No fix listed CWE-284

TI-2023-18462 CVE-2023-36645 · GHSA-78h8-m693-fp8x

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL…

MEDIUM 51

SQL injection vulnerability in ITB-GmbH TradePro v9.5, allows remote attackers to run SQL queries via oordershow component in customer function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00879 Published 2024-04-04 No fix listed CWE-94

TI-2023-18460 CVE-2023-36643 · GHSA-5xrf-xvwc-pmfg

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive…

MEDIUM 40

Incorrect Access Control in ITB-GmbH TradePro v9.5, allows remote attackers to receive all orders from the online shop via oordershow component in customer function.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00664 Published 2024-04-04 No fix listed CWE-284

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0