Vendors / PAX Technology Records 20 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 10
Exploited now PAX Technology records in CISA KEV No PAX Technology vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by a token spoofing vulnerability.
CVSS 3.1 HIGH 8.2· Network · No auth · No interaction · EPSS 0.01158 · Published 2021-05-07 · No fix listed CWE-290
Priority LOW 38
Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control that can lead to remote privilege escalation.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01401 · Published 2021-05-07 · No fix listed CWE-639
Priority LOW 33
Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by incorrect access control where password revalidation in sensitive operations can be bypassed remotely by an authenticated attacker through requesting…
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00939 · Published 2021-05-07 · No fix listed CWE-306
Priority LOW 31
Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by XML External Entity (XXE) injection.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01258 · Published 2021-05-07 · No fix listed CWE-611
Priority LOW 30
Pax Technology PAXSTORE v7.0.8_20200511171508 and lower is affected by an information disclosure vulnerability.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00681 · Published 2021-05-07 · No fix listed CWE-295
Open these records in search → All records by CVSS severity
0 10 10 0 0
THREATIST.IORead the docs