Netcommons

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Netcommons records in CISA KEV

No Netcommons vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Netcommons 4 records MEDIUM

Records

4 records in Netcommons · all components

TI-2016-04158 CVE-2016-4813 · GHSA-m765-qg53-c8v8

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users…

MEDIUM 42

NetCommons 2.4.2.1 and earlier allows remote authenticated secretariat (aka CLERK) users to gain privileges by creating a SYSTEM_ADMIN account.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01889 Published 2016-06-19 No fix listed CWE-284

TI-2006-04030 CVE-2006-4165 · GHSA-9mrh-g7q8-hw6q

Cross-site scripting (XSS) vulnerability in NetCommons 1.0.8 and earlier allows remote…

LOW 33

Cross-site scripting (XSS) vulnerability in NetCommons 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01309 Published 2006-08-16 No fix listed

TI-2019-04307 CVE-2019-6018 · GHSA-98qv-39wh-94xp

Cross-site scripting in NetCommons

LOW 29

Cross-site scripting vulnerability in NetCommons 3.2.2 and earlier (NetCommons3.x) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00781 Published 2019-12-26 No fix listed CWE-79

TI-2007-05689 CVE-2007-5950 · GHSA-p7jp-v69p-p9c2

Cross-site scripting (XSS) vulnerability in NetCommons before 1.0.11, and 1.1.x before…

LOW 23

Cross-site scripting (XSS) vulnerability in NetCommons before 1.0.11, and 1.1.x before 1.1.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-200…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2007-11-14 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	3
Low	0
No CVSS	0