Vendors / Ordat Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Ordat records in CISA KEV No Ordat vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 79
ORDAT FOSS-Online before v2.24.01 was discovered to contain a SQL injection vulnerability via the forgot password function.
CVSS 3.1 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00459 · Published 2024-09-12 · No fix listed CWE-89
Priority MEDIUM 63
User enumeration vulnerability in ORDAT FOSS-Online before v2.24.01 allows attackers to determine if an account exists in the application by comparing the server responses of the forgot password functionality.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00383 · Published 2024-09-12 · No fix listed CWE-204
Priority MEDIUM 60
ORDAT FOSS-Online before version 2.24.01 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login page.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00306 · Published 2024-09-12 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 0 2 0 0
