ShinHer Information Co., LTD.

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ShinHer Information Co., LTD. records in CISA KEV

No ShinHer Information Co., LTD. vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2021-18760 CVE-2021-42330 · GHSA-xq9f-7hxc-qrqx

MEDIUM 40

The “Teacher Edit” function of ShinHer StudyOnline System does not perform authority control.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00981 Published 2021-10-15 No fix listed CWE-285

TI-2021-18761 CVE-2021-42331 · GHSA-wxc7-jc57-c2hc

LOW 25

The “Study Edit” function of ShinHer StudyOnline System does not perform permission control.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00641 Published 2021-10-15 No fix listed CWE-285

TI-2021-18759 CVE-2021-42329 · GHSA-x6v4-jh5f-25pv

LOW 25

The “List_Add” function of message board of ShinHer StudyOnline System does not filter special characters in the title parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2021-10-15 No fix listed CWE-79

TI-2021-18762 CVE-2021-42332 · GHSA-7xh8-5gm5-5q2f

LOW 21

The “List View” function of ShinHer StudyOnline System is not under authority control.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00764 Published 2021-10-15 No fix listed CWE-285