Read the docs

Plunet

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Plunet records in CISA KEV

No Plunet vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Business Manager 2 records LOW

Records

2 records in Business Manager · all components

TI-2009-00667 CVE-2009-0700 · GHSA-6h2q-7gh7-pc6c

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access…

Priority LOW 24

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) l…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02511 Published 2009-02-23 No fix listed CWE-264
TI-2009-00666 CVE-2009-0699 · GHSA-rjc8-j2rv-vwfj

Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the (1) QUB and (2…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01263 Published 2009-02-23 No fix listed CWE-79
Open these records in search →