Wikidsystems

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Wikidsystems records in CISA KEV

No Wikidsystems vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Two Factor Authentication Enterprise Server 5 records MEDIUM 2fa Enterprise Server 3 records MEDIUM Wclient-php 1 record LOW

Records

3 records in 2fa Enterprise Server · all components

TI-2019-12774 CVE-2019-17120 · GHSA-c8f6-jm2m-h3gm

A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise…

MEDIUM 58

A stored and reflected cross-site scripting (XSS) vulnerability in WiKID 2FA Enterprise Server through 4.2.0-b2047 allow remote attackers to inject arbitrary web script or HTML via /WiKIDAdmin/adm_usrs.jsp.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.48937 Published 2019-10-17 No fix listed CWE-79

TI-2019-12771 CVE-2019-17117 · GHSA-75jr-788f-7rw4

A SQL injection vulnerability in processPref.jsp in WiKID 2FA Enterprise Server through…

MEDIUM 42

A SQL injection vulnerability in processPref.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows an authenticated user to execute arbitrary SQL commands via the processPref.jsp key parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01749 Published 2019-10-17 No fix listed CWE-89

TI-2019-12772 CVE-2019-17118 · GHSA-qrhm-956g-2f5j

A CSRF issue in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows a remote attacker…

MEDIUM 40

A CSRF issue in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows a remote attacker to trick an authenticated user into performing unintended actions such as (1) create or delete admin users; (2) create or delete gr…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00937 Published 2019-10-17 No fix listed CWE-352

Open these records in search →

Critical	0
High	4
Medium	5
Low	0
No CVSS	0