Read the docs

MESbook

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

MESbook records in CISA KEV

No MESbook vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mesbook 4 records MEDIUM

Records

4 records in Mesbook · all components

TI-2024-05962 CVE-2024-6424 · GHSA-c5g4-5pgj-3vxf

Server-Side Request Forgery vulnerability in MESbook

Priority MEDIUM 41

External server-side request vulnerability in MESbook 20221021.03 version, which could allow a remote, unauthenticated attacker to exploit the endpoint "/api/Proxy/Post?userName=&password=&uri=<FILE|INTERNAL URL|IP/HOST"…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00494 Published 2024-07-01 No fix listed CWE-918
TI-2024-05965 CVE-2024-6427 · GHSA-xxqj-x2pv-x5jj

Uncontrolled resource consumption in MESbook

Priority MEDIUM 40

Uncontrolled Resource Consumption vulnerability in MESbook 20221021.03 version.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0057 Published 2024-07-03 No fix listed CWE-400
TI-2024-05964 CVE-2024-6426 · GHSA-f238-mg8w-5483

Information exposure vulnerability vulnerability in MESbook

Priority LOW 37

Information exposure vulnerability in MESbook 20221021.03 version, the exploitation of which could allow a local attacker, with user privileges, to access different resources by changing the API value of the application.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00298 Published 2024-07-03 No fix listed CWE-200
Open these records in search →