Navarino

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Navarino records in CISA KEV

No Navarino vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2018-03917 CVE-2018-5384 · GHSA-pj2p-xpf5-qc8h

MEDIUM 49

Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.04199 Published 2018-07-24 Fixed in 2.2 CWE-89

TI-2018-03918 CVE-2018-5385 · GHSA-g9mm-555g-3956

MEDIUM 45

Navarino Infinity is prone to session fixation attacks.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.04019 Published 2018-07-24 Fixed in 2.2 CWE-384

TI-2018-03919 CVE-2018-5386 · GHSA-x93w-rxpc-g58g

MEDIUM 40

Some Navarino Infinity functions, up to version 2.2, placed in the URL can bypass any authentication mechanism leading to an information leak.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.04461 Published 2018-07-24 Fixed in 2.2 CWE-288