Read the docs

Smart eVision Information Technology Inc.

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Smart eVision Information Technology Inc. records in CISA KEV

No Smart eVision Information Technology Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smart Evision 7 records MEDIUM

Records

7 records in Smart Evision · all components

TI-2022-18425 CVE-2022-39033 · GHSA-gxf3-5gjm-vcfh

Smart eVision - Path Traversal -1

Priority MEDIUM 53

Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01842 Published 2022-09-28 No fix listed CWE-22
TI-2022-18424 CVE-2022-39032 · GHSA-h6v4-9c8c-hxcj

Smart eVision - Improper Privilege Management

Priority MEDIUM 42

Smart eVision has an improper privilege management vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00907 Published 2022-09-28 No fix listed CWE-269
TI-2022-18426 CVE-2022-39034 · GHSA-4x42-9v2h-3jxc

Smart eVision - Path Traversal -2

Priority LOW 32

Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01473 Published 2022-09-28 No fix listed CWE-22
TI-2022-18427 CVE-2022-39035 · GHSA-4v6p-4fvv-f67q

Smart eVision - Stored XSS

Priority LOW 28

Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00621 Published 2022-09-28 No fix listed CWE-79
Open these records in search →