Vendors / Rumpus Records 29 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 8
Exploited now Rumpus records in CISA KEV No Rumpus vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 31
A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00372 · Published 2020-02-10 · No fix listed CWE-352
Priority LOW 29
A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00435 · Published 2020-02-10 · No fix listed CWE-352
Priority LOW 29
A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00435 · Published 2020-02-10 · No fix listed CWE-352
Priority LOW 29
A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00766 · Published 2020-02-10 · No fix listed CWE-79
Priority LOW 28
A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00724 · Published 2020-02-10 · No fix listed
Priority LOW 25
A CSRF vulnerability exists in the Block Clients component of Web File Manager in Rumpus FTP 8.2.9.1 that could allow an attacker to whitelist or block any IP address via RAPR/BlockedClients.html.
CVSS 3.1 MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00374 · Published 2020-02-10 · No fix listed CWE-352
Priority LOW 20
A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete the file types that are used on the server via RAPR/TriggerServerFunction.html.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00379 · Published 2020-02-10 · No fix listed CWE-352
Priority LOW 20
A CSRF vulnerability exists in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00379 · Published 2020-02-10 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
3 8 18 0 0
THREATIST.IORead the docs