TI-2024-33191 CVE-2024-49705 · GHSA-mhgm-r3r5-6cwp
XSS in iKSORIS
Priority LOW 24
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of Servise (DoS) attacks.
SoftCOM
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
SoftCOM records in CISA KEVNo SoftCOM vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records
TI-2024-12638 CVE-2024-13597 · GHSA-v334-7q67-v4rm
XSS in iKSORIS
Priority LOW 24
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.
TI-2024-09350 CVE-2024-10087 · GHSA-j848-rv24-jm27
XSS in iKSORIS
Priority LOW 24
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.
TI-2024-33194 CVE-2024-49708 · GHSA-cmwr-c23h-p93f
XSS in iKSORIS
Priority LOW 23
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks.
TI-2024-33193 CVE-2024-49707 · GHSA-7rcm-6m36-qrf5
XSS in iKSORIS
Priority LOW 23
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.
TI-2024-33192 CVE-2024-49706 · GHSA-rpmh-5wh2-6x37
XSS in iKSORIS
Priority LOW 23
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Open Redirect attacks by including base64 encoded URLs in the target parameter sent in a POST request to one of the endpoints.
TI-2024-12639 CVE-2024-13598 · GHSA-vrc8-xx22-hwgx
XSS in iKSORIS
Priority LOW 23
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.
TI-2024-09353 CVE-2024-10090 · GHSA-x45f-24vr-952q
XSS in iKSORIS
Priority LOW 23
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.
TI-2024-09352 CVE-2024-10089 · GHSA-h34x-fr9h-4xrf
XSS in iKSORIS
Priority LOW 23
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks.
TI-2024-09351 CVE-2024-10088 · GHSA-ph7p-prrv-6wj5
XSS in iKSORIS
Priority LOW 23
Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.
TI-2024-33195 CVE-2024-49709 · GHSA-95gw-69j9-7r85
XSS in iKSORIS
Priority LOW 11
Internet Starter, one of SoftCOM iKSORIS system modules, allows for setting an arbitrary session cookie value.