Vendors / Webswing Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 0
Exploited now Webswing records in CISA KEV No Webswing vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading to remote code execution via modification of shell scripts on the server.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01275 · Published 2024-10-31 · No fix listed CWE-22
Priority MEDIUM 47
JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02873 · Published 2020-12-30 · No fix listed
Priority MEDIUM 44
Webswing before 22.1.3 allows X-Forwarded-For header injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01074 · Published 2022-07-08 · No fix listed CWE-74
Open these records in search → All records by CVSS severity
3 0 0 0 0
