Read the docs

SysJust

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

SysJust records in CISA KEV

No SysJust vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cts Web 3 records LOW Syuan-gu-da-shin 3 records MEDIUM

Records

6 records

TI-2020-03438 CVE-2020-3938 · GHSA-2ff4-qhx5-wwhw

SysJust Syuan-Gu-Da-Shih -Request-Forgery

Priority MEDIUM 45

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to launch inquiries into network architecture or system files of the server via forged inquests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01481 Published 2020-02-04 No fix listed CWE-918
TI-2020-03437 CVE-2020-3937 · GHSA-v4ff-5p6c-h76r

SysJust Syuan-Gu-Da-Shih-SQL injection

Priority LOW 38

SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the database.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01375 Published 2020-02-04 No fix listed CWE-89
TI-2021-12217 CVE-2021-32543 · GHSA-jpr6-p297-4w5g

SysJust CTS Web - Broken Authentication

Priority LOW 30

The CTS Web transaction system related to authentication management is implemented incorrectly.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00761 Published 2021-05-28 No fix listed CWE-287
TI-2021-12216 CVE-2021-32542 · GHSA-f5hm-hjxq-fhw3

SysJust CTS Web - Reflected XSS

Priority LOW 28

The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows unauthenticated attackers can remotely perform reflected XSS and obtain the users’ connection token th…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00681 Published 2021-05-28 No fix listed CWE-79
TI-2020-03439 CVE-2020-3939 · GHSA-w63w-793r-vxg5

SysJust Syuan-Gu-Da-Shih -Cross-Site Scripting(XSS)

Priority LOW 28

SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Cross-Site Scripting(XSS), personal information may be leaked to attackers via the vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00699 Published 2020-02-04 No fix listed CWE-79
TI-2021-12215 CVE-2021-32541 · GHSA-549f-vmr8-2vjf

SysJust CTS Web - Broken Access Control

Priority LOW 27

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01511 Published 2021-05-28 No fix listed CWE-287
Open these records in search →