Sokrates

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sokrates records in CISA KEV

No Sokrates vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sowa Opac 1 record LOW Sowasql 1 record LOW

Records

2 records

TI-2020-17197 CVE-2020-28350 · GHSA-98f9-9r42-6h8r

A Cross Site Scripting (XSS) vulnerability exists in OPAC in Sokrates SOWA SowaSQL…

LOW 28

A Cross Site Scripting (XSS) vulnerability exists in OPAC in Sokrates SOWA SowaSQL through 5.6.1 via the sowacgi.php typ parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00668 Published 2020-11-19 No fix listed CWE-79

TI-2024-05606 CVE-2024-6050 · GHSA-3p5v-9pqp-m2pp

Reflected XSS in SOWA OPAC

LOW 25

Improper Neutralization of Input During Web Page Generation vulnerability in SOKRATES-software SOWA OPAC allows a Reflected Cross-Site Scripting (XSS).

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00762 Published 2024-07-01 Fixed in 4.9.10, 6.2.12 CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0