Ximdex

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Ximdex records in CISA KEV

No Ximdex vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Ximdex · all components

TI-2018-08806 CVE-2018-12273 · GHSA-qrmc-rqvr-r2x9

LOW 29

The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00852 Published 2018-06-13 No fix listed CWE-79

TI-2018-08805 CVE-2018-12272 · GHSA-jprm-3hp2-88j9

LOW 29

xowl/request.php in Ximdex 4.0 has XSS via the content parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00852 Published 2018-06-13 No fix listed CWE-79

TI-2018-08637 CVE-2018-12047 · GHSA-qr5w-gmhq-ch9c

LOW 29

xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through 12.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00852 Published 2018-06-08 No fix listed CWE-79

TI-2018-08396 CVE-2018-11735 · GHSA-pq4f-227x-954r

LOW 29

index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0081 Published 2018-06-05 No fix listed CWE-79