Read the docs

Vembu

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Vembu records in CISA KEV

No Vembu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bdr Suite 5 records MEDIUM Offsite Dr 4 records MEDIUM Storegrid 2 records LOW

Records

2 records in Storegrid · all components

TI-2014-08235 CVE-2014-10079 · GHSA-3vx9-wcw7-gppj

In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP…

Priority LOW 35

In Vembu StoreGrid 4.4.x, the front page of the server web interface leaks the private IP address in the "ipaddress" hidden form value of the HTML source code, which is disclosed because of incorrect processing of an ind…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.08749 Published 2019-02-23 No fix listed CWE-200
TI-2014-08234 CVE-2014-10078 · GHSA-7wx2-436r-cm2r

Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php…

Priority LOW 33

Vembu StoreGrid 4.4.x has XSS in interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/registerclient/onlineregfailure.php, and interface/registercustomer/onlineregfa…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03251 Published 2019-02-23 No fix listed CWE-79
Open these records in search →