Vendors / Midasolutions Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 2
Exploited now Midasolutions records in CISA KEV No Midasolutions vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 87
There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98239 · Published 2020-07-24 · No fix listed CWE-78
Priority HIGH 76
There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.57326 · Published 2020-07-24 · No fix listed CWE-78
Priority MEDIUM 60
Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.18293 · Published 2020-07-24 · No fix listed CWE-287
Priority LOW 39
Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0331 · Published 2020-07-24 · No fix listed CWE-22
Priority LOW 37
There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01881 · Published 2020-07-24 · No fix listed CWE-89
Priority LOW 29
A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00943 · Published 2020-07-24 · No fix listed CWE-79
Priority LOW 25
Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2020-07-24 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 2 2 0 0
THREATIST.IORead the docs