Vendors / Metaways Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Metaways records in CISA KEV No Metaways vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
In tine through 2023.01.14.325, the sort parameter of the /index.php endpoint allows SQL Injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00953 · Published 2023-09-01 · No fix listed CWE-89
Priority LOW 26
Metaways Tine 2.0 allows remote attackers to obtain sensitive information via unknown vectors in (1) Crm/Controller.php, (2) Crm/Export/Csv.php, or (3) Calendar/Model/Attender.php, which reveal the full installation path…
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01392 · Published 2011-04-10 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
1 0 1 0 0
