Patterninsight

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Patterninsight records in CISA KEV

No Patterninsight vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pattern Insight 5 records LOW

Records

5 records in Pattern Insight · all components

TI-2012-04174 CVE-2012-4937 · GHSA-3v72-4xqg-8rpf

Session fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote…

LOW 35

Session fixation vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack web sessions via a jsession_id cookie.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0242 Published 2012-11-18 No fix listed

TI-2012-04173 CVE-2012-4936 · GHSA-3c96-x4xm-9p54

The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element.

LOW 33

The web interface in Pattern Insight 2.3 allows remote attackers to conduct clickjacking attacks via a FRAME element.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01504 Published 2012-11-18 No fix listed

TI-2012-04172 CVE-2012-4935 · GHSA-p5x4-466h-8v79

Cross-site request forgery (CSRF) vulnerability in the web interface in Pattern Insight…

LOW 31

Cross-site request forgery (CSRF) vulnerability in the web interface in Pattern Insight 2.3 allows remote attackers to hijack the authentication of arbitrary users.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00739 Published 2012-11-18 No fix listed CWE-352

TI-2012-04187 CVE-2012-4950 · GHSA-cwv2-77rj-p78r

Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface…

LOW 23

Cross-site scripting (XSS) vulnerability in the Keyword Search page in the web interface in Pattern Insight 2.3 allows remote attackers to inject arbitrary web script or HTML via crafted characters that are not properly…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01333 Published 2012-11-18 No fix listed CWE-79

TI-2012-04175 CVE-2012-4938 · GHSA-785q-6cv4-2vm9

Cross-site scripting (XSS) vulnerability in the web interface in Pattern Insight 2.3…

LOW 19

Cross-site scripting (XSS) vulnerability in the web interface in Pattern Insight 2.3 allows remote authenticated administrators to inject arbitrary web script or HTML via the banner message.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01087 Published 2012-11-18 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	4
Low	1
No CVSS	0