Vendors / SLIMS Records 28 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 14 CVSS 7.0–8.9
Exploited now SLIMS records in CISA KEV No SLIMS vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX_lookup_handler.php (tableName and tableFields parameters), admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php.
CVSS 3.0 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01745 · Published 2017-08-06 · No fix listed CWE-89
Priority LOW 34
SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02666 · Published 2017-08-06 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
Critical2 High14 Medium12 Low0 No CVSS0