Vendors / Sunbird Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 7
Exploited now Sunbird records in CISA KEV No Sunbird vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
An issue pertaining to CWE-352: Cross-Site Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00181 · Published 2026-03-09 · No fix listed CWE-352
Priority LOW 39
An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00394 · Published 2026-03-09 · No fix listed CWE-1333
Priority LOW 39
An issue in Sunbird-Ed SunbirdEd-portal v1.13.4 allows attackers to obtain sensitive information.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00294 · Published 2026-02-11 · No fix listed CWE-295
Priority LOW 39
An issue pertaining to CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00477 · Published 2026-03-09 · No fix listed CWE-22
Priority LOW 39
An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00316 · Published 2026-03-11 · No fix listed CWE-918
Priority LOW 37
DCIM dcTrack platforms utilize default and hard-coded credentials for access.
CVSS 4.0 HIGH 8.4· Local · High privileges · No interaction · EPSS 0.00144 · Published 2025-12-04 · Fixed in 9.2.3, 9.2.1 CWE-798
Priority LOW 35
DCIM dcTrack allows an attacker to misuse certain remote access features.
CVSS 4.0 HIGH 7.4· Network · High privileges · No interaction · EPSS 0.00366 · Published 2025-12-04 · Fixed in 9.2.3, 9.2.1 CWE-288
Priority LOW 27
An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00279 · Published 2026-03-09 · No fix listed CWE-601
Priority LOW 24
An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.
CVSS 3.1 MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00271 · Published 2026-03-09 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 7 2 0 0
THREATIST.IORead the docs