smartstore

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

smartstore records in CISA KEV

No smartstore vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Smartstore · all components

TI-2021-12277 CVE-2021-32608 · GHSA-mpph-4mx6-m33r

HIGH 67

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.33442 Published 2021-05-12 No fix listed

TI-2021-12276 CVE-2021-32607 · GHSA-j78g-jgcm-vcjj

HIGH 67

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.33442 Published 2021-05-12 No fix listed

TI-2020-12015 CVE-2020-15243

MEDIUM 44

Affected versions of Smartstore have a missing WebApi Authentication attribute.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01196 Published 2020-10-08 No fix listed CWE-287