Vendors / Yordam Information Technologies Yordam Information Technologies Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Yordam Information Technologies records in CISA KEV No Yordam Information Technologies vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 34
Yordam Library Information Document Automation product before version 19.02 has an unauthenticated Information disclosure vulnerability.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00614 · Published 2022-10-27 · Fixed in 19.02 CWE-200
Priority LOW 30
Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00585 · Published 2023-03-02 · Fixed in 19.2 CWE-233
Priority LOW 30
Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00585 · Published 2023-03-02 · Fixed in 19.2 CWE-233
Priority LOW 28
University Library Automation System developed by Yordam Bilgi Teknolojileri before version 19.2 has an unauthenticated Reflected XSS vulnerability.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00448 · Published 2022-09-22 · Fixed in 19.2 CWE-79
Priority LOW 28
Yordam Library Information Document Automation product before version 19.02 has an unauthenticated reflected XSS vulnerability.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00437 · Published 2022-10-27 · Fixed in 19.02 CWE-79
Priority LOW 27
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Yordam Informatics Library Automation System allows Reflected XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00244 · Published 2025-05-02 · Fixed in 21.6 CWE-79
Priority LOW 27
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Yordam MedasPro allows Reflected XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00383 · Published 2023-09-14 · Fixed in 28 CWE-79
Priority LOW 24
Improper Neutralization of Input During Web Page Generation vulnerability in Yordam Information Technologies Library Automation System allows Stored XSS.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00352 · Published 2023-03-02 · Fixed in 19.2 CWE-79
Open these records in search → All records by CVSS severity
0 1 7 0 0
THREATIST.IORead the docs