K2

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

K2 records in CISA KEV

No K2 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Smartforms 1 record LOW

Records

1 record

TI-2018-07030 CVE-2018-9920 · GHSA-ghrm-c5px-rwm2

Server side request forgery exists in the runtime application in K2 smartforms 4.6.11 via…

LOW 30

Server side request forgery exists in the runtime application in K2 smartforms 4.6.11 via a modified hostname in an https://*/Identity/STS/Forms/Scripts URL.

CVSS 3.0MEDIUM 6.5 Network No auth No interaction EPSS 0.00753 Published 2018-05-24 No fix listed CWE-918

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0