Qpr

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Qpr records in CISA KEV

No Qpr vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Portal 3 records LOW

Records

3 records

TI-2014-06810 CVE-2014-8268 · GHSA-6v7r-4g8j-8pj9

QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request.

LOW 31

QPR Portal before 2012.2.1 allows remote attackers to modify or delete notes via a direct request.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01347 Published 2015-02-01 No fix listed CWE-264

TI-2014-06808 CVE-2014-8266 · GHSA-mvfw-mv76-2rpc

Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the note-creation page in QPR Portal 2014.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body field.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01692 Published 2015-02-01 No fix listed CWE-79

TI-2014-06809 CVE-2014-8267 · GHSA-6q69-fr9m-p8qh

Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in QPR Portal 2014.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the RID parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01119 Published 2015-02-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0