Jspxcms

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jspxcms records in CISA KEV

No Jspxcms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Jspxcms · all components

TI-2024-01115 CVE-2024-1200 · GHSA-4qjq-wqw7-p79p

HIGH 68

A vulnerability was found in Jspxcms 10.2.0 and classified as problematic.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00928 Published 2024-02-03 No fix listed CWE-200

TI-2018-14617 CVE-2018-20596 · GHSA-pxp3-c847-mx5j

MEDIUM 44

Jspxcms v9.0.0 allows SSRF.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01142 Published 2018-12-30 No fix listed CWE-918

TI-2018-11873 CVE-2018-16553 · GHSA-h5p6-p2x9-xj23

LOW 36

In Jspxcms 9.0.0, a vulnerable URL routing implementation allows remote code execution after logging in as web admin.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02536 Published 2019-06-20 No fix listed CWE-284

TI-2024-00662 CVE-2024-0721 · GHSA-87vx-366j-j8w4

LOW 28

A vulnerability has been found in Jspxcms 10.2.0 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0046 Published 2024-01-19 No fix listed CWE-79

TI-2023-25330 CVE-2023-46911 · GHSA-v92j-4pq6-rqx3

LOW 28

There is a Cross Site Scripting (XSS) vulnerability in the choose_style_tree.do interface of Jspxcms v10.2.0 backend.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00446 Published 2023-11-01 No fix listed CWE-79