Jenzabar

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jenzabar records in CISA KEV

No Jenzabar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Internet Campus Solution 3 records MEDIUM Jenzabar 2 records MEDIUM

Records

5 records

TI-2019-07347 CVE-2019-10011 · GHSA-rgc9-9cmm-xrf7

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before…

MEDIUM 46

ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a password of 1234.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02143 Published 2019-03-25 No fix listed CWE-798

TI-2020-06771 CVE-2020-8434 · GHSA-xxqg-cq6p-jpqq

Jenzabar JICS (aka Internet Campus Solution) before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch…

MEDIUM 45

Jenzabar JICS (aka Internet Campus Solution) before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.2.2 Patch 8 has session cookies that are a deterministic function of the username.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01339 Published 2020-05-19 No fix listed CWE-384

TI-2021-08401 CVE-2021-26723 · GHSA-mc4x-hxj7-qw79

Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.

MEDIUM 41

Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.12633 Published 2021-02-06 No fix listed CWE-79

TI-2019-07348 CVE-2019-10012 · GHSA-ppjq-m4gx-9pj8

Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload…

LOW 36

Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager (for .NET) plugin before 2.1.4 in the mox…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01592 Published 2019-03-25 No fix listed CWE-434

TI-2018-12014 CVE-2018-16778 · GHSA-4894-5p8v-h9pg

Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote…

LOW 29

Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter (aka the Search Field).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00813 Published 2018-12-21 No fix listed CWE-79

Open these records in search →

Critical	2
High	1
Medium	2
Low	0
No CVSS	0