Read the docs

Tabit

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Tabit records in CISA KEV

No Tabit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records in Tabit · all components

TI-2022-15580 CVE-2022-34773 · GHSA-jggc-89vw-pwfr

Injection in Tabit

Priority MEDIUM 43

Tabit - HTTP Method manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00585 Published 2022-08-22 No fix listed CWE-74
TI-2022-15579 CVE-2022-34772 · GHSA-c38h-5gmx-rf6h

Tabit - password enumeration

Priority LOW 39

Tabit - password enumeration.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00539 Published 2022-08-22 No fix listed CWE-521
TI-2022-15583 CVE-2022-34776 · GHSA-2fq8-qg89-5r59

Information disclosure in Tabit

Priority LOW 33

Tabit - giftcard stealth.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00526 Published 2022-08-22 No fix listed CWE-200
TI-2022-15582 CVE-2022-34775 · GHSA-cqvg-fwrm-3xxf

Authorization bypass in Tabit

Priority LOW 33

Tabit - Excessive data exposure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00471 Published 2022-08-22 No fix listed CWE-639
TI-2022-15577 CVE-2022-34770 · GHSA-rvrp-jg7g-6r79

Authorization bypass in Tabit

Priority LOW 33

Tabit - sensitive information disclosure.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00455 Published 2022-08-22 No fix listed CWE-639
TI-2022-15581 CVE-2022-34774 · GHSA-8wr9-j43r-pc9h

Tabit - Arbitrary account modification

Priority LOW 28

Tabit - Arbitrary account modification.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00462 Published 2022-08-22 No fix listed
TI-2022-15578 CVE-2022-34771 · GHSA-gxfw-27c3-xr84

Tabit - arbitrary SMS send on Tabits behalf

Priority LOW 25

Tabit - arbitrary SMS send on Tabits behalf.

CVSS 3.1MEDIUM 5.5 Adjacent network Low privileges No interaction EPSS 0.00437 Published 2022-08-22 No fix listed
Open these records in search →