VaeMendis

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

VaeMendis records in CISA KEV

No VaeMendis vulnerabilities are listed in CISA KEV.

3 records

TI-2024-32168 CVE-2024-47915 · GHSA-xwcj-grfm-xm6q

LOW 39

VaeMendis - CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00379 Published 2024-11-14 Fixed in 2.1.5 CWE-200

TI-2024-30330 CVE-2024-45254 · GHSA-mg8m-g8m2-pgf8

LOW 39

VaeMendis - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00379 Published 2024-11-14 Fixed in 2.1.5 CWE-79

TI-2024-32167 CVE-2024-47914 · GHSA-8j32-3852-6cwg

LOW 20

VaeMendis - CWE-352: Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 4.5 Network High privileges User interaction EPSS 0.00178 Published 2024-11-14 Fixed in 2.1.5 CWE-352