Read the docs

SysJust

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

SysJust records in CISA KEV

No SysJust vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cts Web 3 records LOW Syuan-gu-da-shin 3 records MEDIUM

Records

3 records in Cts Web · all components

TI-2021-12217 CVE-2021-32543 · GHSA-jpr6-p297-4w5g

SysJust CTS Web - Broken Authentication

Priority LOW 30

The CTS Web transaction system related to authentication management is implemented incorrectly.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00761 Published 2021-05-28 No fix listed CWE-287
TI-2021-12216 CVE-2021-32542 · GHSA-f5hm-hjxq-fhw3

SysJust CTS Web - Reflected XSS

Priority LOW 28

The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows unauthenticated attackers can remotely perform reflected XSS and obtain the users’ connection token th…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00681 Published 2021-05-28 No fix listed CWE-79
TI-2021-12215 CVE-2021-32541 · GHSA-549f-vmr8-2vjf

SysJust CTS Web - Broken Access Control

Priority LOW 27

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01511 Published 2021-05-28 No fix listed CWE-287
Open these records in search →