Pleasantsolutions

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pleasantsolutions records in CISA KEV

No Pleasantsolutions vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pleasant Password Server 3 records MEDIUM

Records

3 records in Pleasant Password Server · all components

TI-2023-11936 CVE-2023-27121 · GHSA-x6r4-f94j-335g

A cross-site scripting (XSS) vulnerability in the component…

MEDIUM 60

A cross-site scripting (XSS) vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v7.11.41.0 allows attackers to execute arbitrary web scripts or HTML via a crafte…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.22716 Published 2023-10-04 No fix listed CWE-79

TI-2017-12960 CVE-2017-17707 · GHSA-2cmj-fj8p-q47f

Due to missing authorization checks, any authenticated user is able to list, upload, or…

LOW 37

Due to missing authorization checks, any authenticated user is able to list, upload, or delete attachments to password safe entries in Pleasant Password Server before 7.8.3.

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.00836 Published 2018-07-31 No fix listed CWE-862

TI-2017-12961 CVE-2017-17708 · GHSA-qhmh-x535-r77m

Because of insufficient authorization checks it is possible for any authenticated user to…

LOW 21

Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00584 Published 2018-07-31 No fix listed CWE-863

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0