Read the docs

sos-berlin

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

sos-berlin records in CISA KEV

No sos-berlin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jobscheduler 5 records MEDIUM

Records

5 records

TI-2020-10107 CVE-2020-12712 · GHSA-w8q7-623v-pvjv

A vulnerability based on insecure user/password encryption in the JOE (job editor)…

Priority MEDIUM 43

A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attackers to decrypt the user/password that is optionally stored with a user's profile…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.07842 Published 2020-06-11 No fix listed CWE-330
TI-2020-05561 CVE-2020-6856 · GHSA-p9v4-8pgw-x8xr

An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS…

Priority LOW 31

An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the server via an entity declaration in any of the XML documents that…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00926 Published 2020-02-06 No fix listed CWE-776
TI-2020-05560 CVE-2020-6855 · GHSA-547f-rmfj-7xhg

A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler…

Priority LOW 31

A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to parameterize housekeeping jobs in a way that exhausts system resources and results in a denial o…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00914 Published 2020-02-06 No fix listed CWE-835
TI-2020-05559 CVE-2020-6854 · GHSA-f299-j7j4-m9w9

A cross-site scripting (XSS) vulnerability in the JOC Cockpit component of SOS…

Priority LOW 25

A cross-site scripting (XSS) vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to inject arbitrary web script or HTML via JSON properties available from the REST API.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00522 Published 2020-02-05 No fix listed CWE-79
Open these records in search →