THM-Health

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

THM-Health records in CISA KEV

No THM-Health vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pilos 5 records MEDIUM Feedbacksystem 2 records LOW

Records

8 records

TI-2023-25447 CVE-2023-47107

PILOS account takeover through password reset poisoning

MEDIUM 41

PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00599 Published 2023-11-08 Fixed in 2.3.0 CWE-20

TI-2025-38763 CVE-2025-62523

PILOS Misconfigured the Access-Control-Allow-Origin Header

LOW 27

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00204 Published 2025-10-27 Fixed in 4.8.0 CWE-942

TI-2023-19076 CVE-2023-37468

Storing unencrypted LDAP passwords in feedbacksystem

LOW 26

Feedbacksystem is a personalized feedback system for students using artificial intelligence.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00171 Published 2023-07-13 Fixed in 1.19.2 CWE-312

TI-2025-38764 CVE-2025-62524

PILOS Exposes PHP version

LOW 24

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00261 Published 2025-10-27 Fixed in 4.8.0 CWE-200

TI-2025-38964 CVE-2025-62781

PILOS is missing session regeneration after password change

LOW 22

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00174 Published 2025-10-27 Fixed in 4.8.0 CWE-613

TI-2023-12213 CVE-2023-27485

Insufficient verification of authorisation when accessing subresults in thmmniii/fbs-core

LOW 21

thmmniii/fbs-core is an open source feedback system for students.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00506 Published 2023-03-07 Fixed in 1.5.3 CWE-863

TI-2026-18318 CVE-2026-22800

PILOS affected by a CSRF via GET request allows unintentional termination of all active video conferences

LOW 20

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton.

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.00151 Published 2026-01-12 Fixed in 4.10.0 CWE-352

TI-2026-50127 CVE-2026-71555

PILOS: Reverse tabnabbing in room description

LOW 19

PILOS (Platform for Interactive Live-Online Seminars) is a frontend for BigBlueButton.

CVSS 3.1MEDIUM 4.1 Network Low privileges User interaction EPSS 0.00293 Published 2026-08-06 Fixed in 4.14.1 CWE-1022

Open these records in search →

Critical	0
High	1
Medium	7
Low	0
No CVSS	0