OSWAPP

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

OSWAPP records in CISA KEV

No OSWAPP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Warehouse Inventory System 1 record LOW

Records

3 records

TI-2024-06913 CVE-2024-7459 · GHSA-hp69-c2jc-pph2

OSWAPP Warehouse Inventory System edit_account.php cross-site request forgery

HIGH 66

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00372 Published 2024-08-04 No fix listed CWE-352

TI-2024-06914 CVE-2024-7460 · GHSA-48fc-q3xv-7q79

OSWAPP Warehouse Inventory System change_password.php cross-site request forgery

MEDIUM 64

A vulnerability was found in OSWAPP Warehouse Inventory System 1.0/2.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00372 Published 2024-08-04 No fix listed CWE-352

TI-2020-14687 CVE-2020-23836 · GHSA-97h9-x72q-whg5

A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse…

LOW 39

A Cross-Site Request Forgery (CSRF) vulnerability in edit_user.php in OSWAPP Warehouse Inventory System (aka OSWA-INV) through 2020-08-10 allows remote attackers to change the admin's password after an authenticated admi…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00645 Published 2020-09-01 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0