We-com

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

We-com records in CISA KEV

No We-com vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Opendata Cms · all components

TI-2020-12236 CVE-2020-15540 · GHSA-48cf-wvgf-fhxg

MEDIUM 46

We-com OpenData CMS 2.0 allows SQL Injection via the username field on the administrator login page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01762 Published 2020-07-05 No fix listed CWE-89