Resourcexpress

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Resourcexpress records in CISA KEV

No Resourcexpress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Meeting Monitor 1 record MEDIUM Qubi3 Firmware 1 record LOW Resourcexpress 1 record LOW

Records

3 records

TI-2020-10858 CVE-2020-13877 · GHSA-5m2f-38x2-jc6h

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could…

MEDIUM 46

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02224 Published 2020-11-12 No fix listed CWE-89

TI-2020-17432 CVE-2020-28898 · GHSA-8f3f-v672-6q39

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in…

LOW 27

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01343 Published 2021-04-15 No fix listed CWE-20

TI-2020-15755 CVE-2020-25746 · GHSA-m6gc-ch5r-72pr

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with…

LOW 21

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obtain sensitive information via the debug interface (keystrokes over a USB cable), aka wireless passwor…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00307 Published 2020-11-17 No fix listed CWE-200

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0