STVS SA

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

STVS SA records in CISA KEV

No STVS SA vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Provision 2 records HIGH

Records

3 records

TI-2021-22341 CVE-2021-47724 · GHSA-5wfc-7v23-c2vf

STVS ProVision Authenticated File Disclosure via archive.rb

HIGH 70

STVS ProVision 5.9.10 contains a path traversal vulnerability that allows authenticated attackers to access arbitrary files by manipulating the files parameter in the archive download functionality.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00769 Published 2025-12-09 No fix listed CWE-22

TI-2021-22340 CVE-2021-47723 · GHSA-q28j-qr7m-gpf6

STVS ProVision Cross-Site Request Forgery (Add Admin)

MEDIUM 64

STVS ProVision 5.9.10 contains a cross-site request forgery vulnerability that allows attackers to perform actions with administrative privileges by exploiting unvalidated HTTP requests.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00199 Published 2025-12-09 No fix listed CWE-352

TI-2021-22342 CVE-2021-47725 · GHSA-x8v6-6vmg-p732

STVS ProVision 5.9.10 Authenticated Reflected Cross-Site Scripting via Files Parameter

MEDIUM 55

STVS ProVision 5.9.10 contains a cross-site scripting vulnerability in the 'files' POST parameter that allows authenticated attackers to inject arbitrary HTML code.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00217 Published 2025-12-31 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0