Vendors / Universis Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Universis records in CISA KEV No Universis vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
A SQL Injection vulnerability exists in UniverSIS UniverSIS-API through 1.2.1 via the $select parameter to multiple API endpoints.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01449 · Published 2022-04-25 · No fix listed CWE-89
Priority LOW 31
An information disclosure vulnerability in UniverSIS-Students before v1.5.0 allows attackers to obtain sensitive information via a crafted GET request to the endpoint /api/students/me/courses/.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00999 · Published 2022-05-18 · No fix listed CWE-668
Open these records in search → All records by CVSS severity
0 1 1 0 0
