WellChoose

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

WellChoose records in CISA KEV

No WellChoose vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Organization Portal System 9 records MEDIUM Administrative Management System 3 records MEDIUM Single Sign-on Portal System 3 records MEDIUM

Records

3 records in Administrative Management System · all components

TI-2024-09462 CVE-2024-10202 · GHSA-3g9r-f97h-h43m

Wellchoose Administrative Management System - OS Command Injection

MEDIUM 42

Administrative Management System from Wellchoose has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01096 Published 2024-10-21 No fix listed CWE-78

TI-2024-09461 CVE-2024-10201 · GHSA-69pw-gpfc-cjpg

Wellchoose Administrative Management System - Arbitrary File Upload

MEDIUM 41

Administrative Management System from Wellchoose does not properly validate uploaded file types, allowing remote attackers with regular privileges to upload and execute webshells.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.006 Published 2024-10-21 No fix listed CWE-434

TI-2024-09460 CVE-2024-10200 · GHSA-4hq6-9q59-hg3w

Wellchoose Administrative Management System - Arbitrary File Read through Path Traversal

MEDIUM 40

Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to download arbitrary files on the server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00719 Published 2024-10-21 No fix listed CWE-23

Open these records in search →

Critical	2
High	9
Medium	5
Low	0
No CVSS	0