Vendors / Web-audimex Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now Web-audimex records in CISA KEV No Web-audimex vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Audimexee v14.1.7 was discovered to contain a SQL injection vulnerability via the p_table_name parameter.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00777 · Published 2023-09-05 · No fix listed CWE-89
Priority MEDIUM 63
AudimexEE 15.0 was discovered to contain a full path disclosure vulnerability.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00704 · Published 2023-08-29 · No fix listed CWE-22
Priority MEDIUM 60
AudimexEE v15.0 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities via the Show Kai Data component.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00476 · Published 2023-08-29 · No fix listed CWE-79
Priority MEDIUM 58
Cross Site Scripting vulnerability in audimex audimexEE v.15.1.2 and fixed in 15.1.3.9 allows a remote attacker to execute arbitrary code via the service, method, widget_type, request_id, payload parameters.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00485 · Published 2024-06-04 · No fix listed CWE-79
Priority MEDIUM 40
SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands via the object_path parameter.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00953 · Published 2020-11-05 · No fix listed CWE-89
Priority LOW 26
AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting).
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00845 · Published 2020-11-05 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 1 5 0 0
THREATIST.IORead the docs