Whitesourcesoftware

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Whitesourcesoftware records in CISA KEV

No Whitesourcesoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Whitesource 1 record LOW

Records

1 record

TI-2020-04360 CVE-2020-5304 · GHSA-gmq8-5gxx-6r3g

The dashboard in WhiteSource Application Vulnerability Management (AVM) before version…

LOW 35

The dashboard in WhiteSource Application Vulnerability Management (AVM) before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00995 Published 2020-06-08 No fix listed CWE-116

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0