Vendors / Openpsa2 Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Openpsa2 records in CISA KEV No Openpsa2 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03998 · Published 2018-06-26 · No fix listed CWE-502
Priority LOW 37
Openpsa contains a XML Injection vulnerability in RSS file upload feature that can result in Remote denial of service.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02022 · Published 2018-06-26 · No fix listed CWE-91
Open these records in search → All records by CVSS severity
1 1 0 0 0
