Read the docs

Tine20

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Tine20 records in CISA KEV

No Tine20 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tine 2.0 4 records LOW

Records

4 records

TI-2017-10947 CVE-2017-14923 · GHSA-8p7x-6v2f-7qv5

Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community…

Priority LOW 26

Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application admi…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00926 Published 2017-09-29 No fix listed CWE-79
TI-2017-10946 CVE-2017-14922 · GHSA-hgwx-q73m-3qhx

Stored XSS vulnerability via IMG element at "History" of Profile, Calendar, Tasks, and…

Priority LOW 26

Stored XSS vulnerability via IMG element at "History" of Profile, Calendar, Tasks, and CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rend…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00907 Published 2017-09-29 No fix listed CWE-79
TI-2017-10945 CVE-2017-14921 · GHSA-q55m-8f9f-jgg3

Stored XSS vulnerability via IMG element at "Filename" of Filemanager in Tine 2.0…

Priority LOW 26

Stored XSS vulnerability via IMG element at "Filename" of Filemanager in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the applicat…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00926 Published 2017-09-29 No fix listed CWE-79
Open these records in search →