Read the docs

National Keep Cyber Security Services

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

National Keep Cyber Security Services records in CISA KEV

No National Keep Cyber Security Services vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00579 Published 2024-02-02 Fixed in v1.5 CWE-434
Priority MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0029 Published 2024-02-02 Fixed in v1.5 CWE-352
Priority LOW 35

Incorrect Authorization vulnerability in National Keep Cyber Security Services CyberMath allows Accessing Functionality Not Properly Constrained by ACLs.

CVSS 4.0HIGH 8.2 Local Low privileges No interaction EPSS 0.00277 Published 2024-09-26 Fixed in CYBM.240816253 CWE-863
Priority LOW 30

Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath allows Collect Data from Common Resource Locations.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00285 Published 2024-09-26 Fixed in CYBM.240816253 CWE-552
TI-2023-06104 CVE-2023-6673 · GHSA-q45w-f72f-v464

Reflected XSS in National Keep's CyberMath

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cyber Security Services CyberMath allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00331 Published 2024-02-02 Fixed in v1.5 CWE-79
TI-2023-06103 CVE-2023-6672 · GHSA-439f-fqrh-gmv2

Stored XSS in National Keep's CyberMath

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cyber Security Services CyberMath allows Stored XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00292 Published 2024-02-02 Fixed in v1.5 CWE-79
Open these records in search →