Teamworktec

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Teamworktec records in CISA KEV

No Teamworktec vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2017-10868 CVE-2017-14840 · GHSA-85xp-pw8p-jjg3

MEDIUM 44

TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03516 Published 2017-09-27 No fix listed CWE-434

TI-2017-10867 CVE-2017-14839 · GHSA-qrx7-28jj-4c32

MEDIUM 44

TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03516 Published 2017-09-27 No fix listed CWE-434

TI-2017-10866 CVE-2017-14838 · GHSA-j45r-mrwm-9mjx

MEDIUM 44

TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03516 Published 2017-09-27 No fix listed CWE-434