Quadbase

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Quadbase records in CISA KEV

No Quadbase vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Espressdashboard 2 records LOW Espressreports Es 2 records LOW Espressreport Enterprise Server 1 record LOW Espressreport Es 1 record LOW

Records

6 records

TI-2020-15264 CVE-2020-24984 · GHSA-jwc9-vppx-v4hj

An issue was discovered in Quadbase EspressReports ES 7 Update 9.

LOW 39

An issue was discovered in Quadbase EspressReports ES 7 Update 9.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00577 Published 2021-03-11 No fix listed CWE-352

TI-2020-15263 CVE-2020-24983 · GHSA-mfjv-v3p5-r7fc

An issue was discovered in Quadbase EspressReports ES 7 Update 9.

LOW 39

An issue was discovered in Quadbase EspressReports ES 7 Update 9.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00639 Published 2021-03-11 No fix listed CWE-352

TI-2019-07324 CVE-2019-9958 · GHSA-3h2w-5hmv-xgqc

CSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows…

LOW 39

CSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to escalate privileges, or create new admin accounts by crafting a malicious web page that issues specific requests, u…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00777 Published 2019-06-24 No fix listed CWE-352

TI-2020-15265 CVE-2020-24985 · GHSA-p35c-xw2m-p8x4

An issue was discovered in Quadbase EspressReports ES 7 Update 9.

LOW 37

An issue was discovered in Quadbase EspressReports ES 7 Update 9.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01103 Published 2021-03-15 No fix listed CWE-829

TI-2019-07323 CVE-2019-9957 · GHSA-fg88-6r3w-mcpx

Stored XSS within Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers…

LOW 26

Stored XSS within Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00806 Published 2019-06-24 No fix listed CWE-79

TI-2020-15262 CVE-2020-24982 · GHSA-jr2x-v32r-wg4w

An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9.

LOW 20

An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00445 Published 2021-03-15 No fix listed CWE-352

Open these records in search →

Critical	0
High	4
Medium	2
Low	0
No CVSS	0