Softmedyazilim

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Softmedyazilim records in CISA KEV

No Softmedyazilim vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Selfpatron · all components

TI-2023-02672 CVE-2023-2852 · GHSA-xhx3-c8wc-wmrr

MEDIUM 51

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Softmed SelfPatron allows SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00879 Published 2023-07-09 Fixed in 2.0 CWE-89

TI-2023-02673 CVE-2023-2853 · GHSA-68p8-pp29-g967

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Softmed SelfPatron allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00488 Published 2023-07-09 Fixed in 2.0 CWE-79