ORION

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ORION records in CISA KEV

No ORION vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Orion Application Server 1 record LOW Woocommerce Products Designer 1 record LOW

Records

2 records

TI-2022-23200 CVE-2022-46856 · GHSA-8hhr-c8gg-qq77

WordPress Woocommerce Product Designer Plugin <= 4.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in ORION Woocommerce Products Designer plugin <= 4.3.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2023-05-25 No fix listed CWE-352

TI-2009-04254 CVE-2009-4493 · GHSA-v9xm-gfm5-pq92

Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable…

LOW 33

Orion Application Server 2.0.7 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite fil…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06966 Published 2010-01-13 No fix listed CWE-20

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0