Simplerisk

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Simplerisk records in CISA KEV

No Simplerisk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simplerisk 4 records LOW

Records

4 records in Simplerisk · all components

TI-2013-04887 CVE-2013-5748 · GHSA-g57r-gxm5-v65v

Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in…

LOW 34

Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to hijack the authentication of users for requests that add projects via an…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01987 Published 2014-05-12 No fix listed CWE-352

TI-2017-07825 CVE-2017-10711 · GHSA-mgcf-42wq-rwx5

In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email…

LOW 29

In SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form) can insert XSS sequences via the user parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00745 Published 2017-07-24 No fix listed CWE-79

TI-2021-03127 CVE-2021-4269 · GHSA-h68q-ghcw-fvww

SimpleRisk common.js checkAndSetValidation cross site scripting

LOW 28

A vulnerability has been found in SimpleRisk and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00508 Published 2022-12-21 No fix listed CWE-707

TI-2013-04888 CVE-2013-5749 · GHSA-5w2h-v8xg-x9vg

Cross-site scripting (XSS) vulnerability in management/prioritize_planning.php in…

LOW 23

Cross-site scripting (XSS) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to inject arbitrary web script or HTML via the new_project parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01457 Published 2014-05-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	4
Low	0
No CVSS	0