Read the docs

Joruri

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Joruri records in CISA KEV

No Joruri vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Joruri Mail 2 records LOW Joruri Cms 2017 1 record LOW

Records

3 records

TI-2019-04255 CVE-2019-5965 · GHSA-rjmj-2r6q-9wpp

Open redirect in SiteBridge Inc. Joruri Mail

Priority LOW 30

Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01133 Published 2019-07-05 No fix listed CWE-601
TI-2019-04257 CVE-2019-5967 · GHSA-xvr4-69m8-v6mv

Cross-site scripting in SiteBridge Inc. Joruri CMS 2017

Priority LOW 29

Cross-site scripting vulnerability in Joruri CMS 2017 Release2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0104 Published 2019-07-05 No fix listed CWE-79
TI-2019-04256 CVE-2019-5966 · GHSA-8gp8-q73h-h557

Authorization bypass in SiteBridge Inc. Joruri Mail

Priority LOW 26

Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors.

CVSS 3.0MEDIUM 5.4 Network No auth User interaction EPSS 0.01042 Published 2019-07-05 No fix listed CWE-639
Open these records in search →