Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Untis records in CISA KEVNo Untis vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 38
Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00452 · Published 2020-03-13 · No fix listed CWE-352
Priority LOW 28
Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00655 · Published 2020-09-24 · No fix listed CWE-79
Open these records in search →