OpenGnsys

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

OpenGnsys records in CISA KEV

No OpenGnsys vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Opengnsys · all components

TI-2024-03454 CVE-2024-3704 · GHSA-rpjc-8hv7-4jhp

MEDIUM 50

SQL Injection Vulnerability has been found on OpenGnsys product affecting version 1.1.1d (Espeto).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00729 Published 2024-04-12 No fix listed CWE-89

TI-2024-03455 CVE-2024-3705 · GHSA-pjv5-66g3-7gqx

MEDIUM 41

Unrestricted file upload vulnerability in OpenGnsys affecting version 1.1.1d (Espeto).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00765 Published 2024-04-12 No fix listed CWE-434

TI-2024-03456 CVE-2024-3706 · GHSA-g949-gmj8-65gh

LOW 33

Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00518 Published 2024-04-12 No fix listed CWE-200

TI-2024-03457 CVE-2024-3707 · GHSA-94qf-5xc2-5vrq

LOW 30

Information exposure vulnerability in OpenGnsys affecting version 1.1.1d (Espeto).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0046 Published 2024-04-12 No fix listed CWE-548