Vendors / Jatos Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 5
Exploited now Jatos records in CISA KEV No Jatos vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
JATOS 3.9.4 contains a denial-of-service (DoS) vulnerability in the authentication system, where an attacker can prevent legitimate users from accessing their accounts by repeatedly sending multiple failed login attempts…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00834 · Published 2025-01-07 · No fix listed CWE-307
Priority HIGH 72
Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 allows an attacker to reset the administrator's password.
CVSS 3.1 HIGH 8.4· Network · High privileges · User interaction · EPSS 0.00253 · Published 2024-11-05 · No fix listed CWE-352
Priority HIGH 72
Cross-Site Request Forgery (CSRF) vulnerability in JATOS v3.9.3 that allows attackers to perform actions reserved for administrators, including creating admin accounts.
CVSS 3.1 HIGH 8.4· Network · High privileges · User interaction · EPSS 0.00253 · Published 2024-11-05 · No fix listed CWE-352
Priority HIGH 72
Stored Cross-Site Scripting (XSS) vulnerability discovered in the Properties Component of JATOS v3.9.3.
CVSS 3.1 HIGH 8.4· Network · High privileges · User interaction · EPSS 0.0051 · Published 2024-11-05 · No fix listed CWE-79
Priority HIGH 72
Stored Cross-Site Scripting (XSS) vulnerability discovered in JATOS v3.9.3.
CVSS 3.1 HIGH 8.4· Network · High privileges · User interaction · EPSS 0.00644 · Published 2024-11-05 · No fix listed CWE-79
Priority LOW 26
A vulnerability classified as critical has been found in JATOS.
CVSS 3.1 MEDIUM 5.5· Adjacent network · Low privileges · No interaction · EPSS 0.00711 · Published 2023-01-06 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
0 5 1 0 0
THREATIST.IORead the docs