Read the docs

Vimbadmin

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Vimbadmin records in CISA KEV

No Vimbadmin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

Priority MEDIUM 42

Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an adminis…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01998 Published 2017-06-27 No fix listed CWE-352
Priority LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) transport parameter to domain/add; the (3) name parameter to…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01012 Published 2017-05-23 No fix listed CWE-79
Open these records in search →