Vendors / Mind Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Mind records in CISA KEV No Mind vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 43
InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.06798 · Published 2020-10-20 · No fix listed CWE-425
Priority MEDIUM 42
CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01978 · Published 2020-11-05 · No fix listed CWE-1236
Priority LOW 36
Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01023 · Published 2020-11-05 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 0 0 0
