yetiforcecompany

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

yetiforcecompany records in CISA KEV

No yetiforcecompany vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yetiforce Customer Relationship Management 18 records MEDIUM

Records

18 records

TI-2022-02773 CVE-2022-3005 · GHSA-vx3x-hwph-grvw

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0065 Published 2022-09-20 Fixed in 6.4.0 CWE-79

TI-2022-02772 CVE-2022-3004 · GHSA-qwc8-vjh3-gm2j

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0065 Published 2022-09-20 Fixed in 6.4.0 CWE-79

TI-2022-02769 CVE-2022-3000 · GHSA-mqh9-5jp9-6799

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0065 Published 2022-09-20 Fixed in 6.4.0 CWE-79

TI-2022-02704 CVE-2022-2924 · GHSA-2qf8-h7pr-x2r8

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00776 Published 2022-09-20 Fixed in 6.3 CWE-79

TI-2022-00203 CVE-2022-0269 · GHSA-7g7r-gr46-q4p5

Cross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm

LOW 35

Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00531 Published 2022-01-24 Fixed in 6.3.0 CWE-352

TI-2023-27042 CVE-2023-49508 · GHSA-394m-vxwj-363j

Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and…

LOW 31

Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php comp…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0104 Published 2024-02-16 Fixed in 6.5.0 CWE-22

TI-2022-01292 CVE-2022-1411 · GHSA-pqr6-3j58-9w58

Unrestructed file upload in yetiforcecompany/yetiforcecrm

LOW 29

Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00761 Published 2022-05-05 Fixed in 6.4.0 CWE-434

TI-2021-02997 CVE-2021-4121 · GHSA-j85f-xw9x-ffwp

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

LOW 29

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0079 Published 2021-12-16 Fixed in 6.4.0 CWE-79

TI-2021-02986 CVE-2021-4107 · GHSA-rp42-c45j-g46x

Cross-site Scripting (XSS) - Reflected in yetiforcecompany/yetiforcecrm

LOW 29

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00808 Published 2021-12-14 Fixed in 6.4.0 CWE-79

TI-2022-02771 CVE-2022-3002 · GHSA-v9fj-h8g6-4w9q

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

LOW 26

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00698 Published 2022-10-06 Fixed in 6.4.0 CWE-79

TI-2022-02680 CVE-2022-2890 · GHSA-jhxh-68jj-68c7

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

LOW 26

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00893 Published 2022-08-22 Fixed in 6.4.0 CWE-79

TI-2022-02623 CVE-2022-2829 · GHSA-gj5j-mwf9-rqv9

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

LOW 26

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00847 Published 2022-08-23 Fixed in 6.4.0 CWE-79

TI-2022-01222 CVE-2022-1340 · GHSA-w83m-rghh-frxj

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

LOW 25

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.005 Published 2022-08-22 Fixed in 6.4.0 CWE-79

TI-2021-02992 CVE-2021-4116 · GHSA-fwh7-v4gf-xv7w

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

LOW 25

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2021-12-15 Fixed in 6.4.0 CWE-79

TI-2022-02675 CVE-2022-2885 · GHSA-rjvc-mf7r-ch7r

Cross-site Scripting (XSS) - Stored in yetiforcecompany/yetiforcecrm

LOW 23

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0049 Published 2022-08-21 Fixed in 6.4.0 CWE-79

TI-2021-02993 CVE-2021-4117 · GHSA-cxg7-84wp-8pcq

Business Logic Errors in yetiforcecompany/yetiforcecrm

LOW 21

yetiforcecrm is vulnerable to Business Logic Errors

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00731 Published 2021-12-15 Fixed in 6.4.0 CWE-840

TI-2021-02989 CVE-2021-4111 · GHSA-7v7w-f7c6-f829

Business Logic Errors in yetiforcecompany/yetiforcecrm

LOW 21

yetiforcecrm is vulnerable to Business Logic Errors

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00641 Published 2021-12-15 Fixed in 6.4.0 CWE-840

TI-2021-02972 CVE-2021-4092 · GHSA-v4cr-m5f8-gxw8

Cross-Site Request Forgery (CSRF) in yetiforcecompany/yetiforcecrm

LOW 20

yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00395 Published 2021-12-11 Fixed in 6.3.0 CWE-352

Open these records in search →