Tracefinanacial

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Tracefinanacial records in CISA KEV

No Tracefinanacial vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Crestbridge · all components

TI-2020-15138 CVE-2020-24671 · GHSA-fvfg-j5pp-h8xx

MEDIUM 40

Trace Financial CRESTBridge <6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00961 Published 2021-06-10 No fix listed CWE-89

TI-2020-15134 CVE-2020-24667 · GHSA-28q6-f58p-4jf2

MEDIUM 40

Trace Financial CRESTBridge <6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00961 Published 2021-06-10 No fix listed CWE-89

TI-2020-15130 CVE-2020-24663 · GHSA-fmxr-r9xc-q869

LOW 25

Trace Financial CRESTBridge <6.3.0.02 contains a stored XSS vulnerability, which was fixed in 6.3.0.03.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00491 Published 2021-06-10 No fix listed CWE-79