Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Tmall records in CISA KEVNo Tmall vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 74
An access control issue in Tmall_demo v2024.07.03 allows attackers to obtain sensitive information.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00369 · Published 2024-07-15 · No fix listed CWE-200
Priority HIGH 65
Tmall_demo before v2024.07.03 was discovered to contain a SQL injection vulnerability.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00257 · Published 2024-07-15 · No fix listed CWE-89
Priority MEDIUM 63
A vulnerability classified as problematic has been found in Tmall Demo up to 20250505.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00476 · Published 2025-05-24 · No fix listed CWE-79
Priority MEDIUM 63
A vulnerability was found in Tmall Demo up to 20250505.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00339 · Published 2025-05-24 · No fix listed CWE-352
Priority MEDIUM 61
A vulnerability, which was classified as problematic, was found in Tmall Demo up to 20250505.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00619 · Published 2025-05-24 · No fix listed CWE-310
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in Mini-Tmall up to 20250211.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00569 · Published 2025-03-03 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in Mini-Tmall up to 20240901.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00493 · Published 2024-09-08 · No fix listed CWE-89
Priority MEDIUM 56
A vulnerability classified as problematic was found in Tmall Demo up to 20250505.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00363 · Published 2025-05-24 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was found in Tmall Demo up to 20250505.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00588 · Published 2025-05-24 · No fix listed CWE-284
Priority MEDIUM 56
A vulnerability was found in Tmall Demo up to 20250505.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00509 · Published 2025-05-24 · No fix listed CWE-284
Priority MEDIUM 56
Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload via the component uploadUserHeadImage.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00338 · Published 2024-07-15 · No fix listed CWE-434
Priority MEDIUM 55
A vulnerability, which was classified as problematic, has been found in Tmall Demo up to 20250505.
CVSS 4.0MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00367 · Published 2025-05-24 · No fix listed CWE-79
Priority LOW 24
Tmall_demo v2024.07.03 was discovered to contain an arbitrary file upload vulnerability.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00278 · Published 2024-07-15 · No fix listed CWE-434
THREATIST.IORead the docs