Xm-online

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Xm-online records in CISA KEV

No Xm-online vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2019-11658 CVE-2019-15558 · GHSA-m224-6rqv-rp4g

MEDIUM 45

XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01421 Published 2019-08-26 No fix listed CWE-89

TI-2019-11657 CVE-2019-15557 · GHSA-hqf7-rm52-cmrx

MEDIUM 45

XM^online 2 User Account and Authentication server 1.0.0 allows SQL injection via a tenant key.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01548 Published 2019-08-26 No fix listed CWE-89