Vendors / Sandline Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Sandline records in CISA KEV No Sandline vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
Sandline Centraleyezer (On Premises) allows unrestricted File Upload with a dangerous type, because the feature of adding ".jpg" to any uploaded filename is not enforced on the server side.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02009 · Published 2019-11-18 · No fix listed CWE-434
Priority LOW 29
Sandline Centraleyezer (On Premises) allows Unrestricted File Upload leading to Stored XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01054 · Published 2019-11-18 · No fix listed CWE-79
Priority LOW 29
Sandline Centraleyezer (On Premises) allows Stored XSS using HTML entities in the name field of the Category section.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00909 · Published 2019-11-18 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 0 2 0 0
