Vendors / Parlano Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Parlano records in CISA KEV No Parlano vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01239 · Published 2005-08-17 · No fix listed
Priority LOW 36
Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to bypass authentication via unknown vectors.
CVSS 2.0 HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01635 · Published 2005-08-17 · No fix listed
Priority LOW 26
Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the "User Enumeration" vulnerability.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01388 · Published 2005-08-17 · No fix listed
Priority LOW 22
Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01177 · Published 2005-08-17 · No fix listed
Open these records in search → All records by CVSS severity
Critical1 High1 Medium2 Low0 No CVSS0