Vendors / Janrain Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Janrain records in CISA KEV No Janrain vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 34
The Janrain Engage (formerly RPX) module 6.x-1.3 for Drupal does not validate the file for a profile image, which allows remote authenticated users to conduct cross-site scripting (XSS) attacks and possibly execute arbit…
CVSS 2.0 MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02062 · Published 2011-02-04 · No fix listed CWE-20
Priority LOW 26
The Janrain Engage (formerly RPX) module for Drupal 6.x-1.x.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01563 · Published 2012-07-25 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
0 2 4 0 0
