Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Xm-online records in CISA KEVNo Xm-online vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
1 record in Xm^online 2 - Common Utils And Endpoints · all components
Priority MEDIUM 45
XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01421 · Published 2019-08-26 · No fix listed CWE-89
Open these records in search →