Sens Project

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Sens Project records in CISA KEV

No Sens Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Sens · all components

TI-2022-22584 CVE-2022-45760 · GHSA-3c8c-vcmc-g2h3

MEDIUM 41

SENS v1.0 is vulnerable to Incorrect Access Control vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00596 Published 2022-12-12 No fix listed CWE-863

TI-2022-22583 CVE-2022-45759 · GHSA-wp5g-24xx-jcg4

MEDIUM 41

SENS v1.0 has a file upload vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00634 Published 2022-12-12 No fix listed CWE-434

TI-2022-22581 CVE-2022-45756 · GHSA-9mgg-3gj3-77pg

LOW 27

SENS v1.0 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0036 Published 2022-12-12 No fix listed CWE-79

TI-2022-22582 CVE-2022-45758 · GHSA-jv2g-hj6c-v276

LOW 24

SENS v1.0 is vulnerable to Cross Site Scripting (XSS) via com.liuyanzhao.sens.web.controller.admin, getRegister.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0036 Published 2022-12-12 No fix listed CWE-79