Zerof

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Zerof records in CISA KEV

No Zerof vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records

TI-2021-10716 CVE-2021-30176 · GHSA-2pqf-pg56-pwcv

HIGH 65

The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.29036 Published 2021-04-13 No fix listed CWE-89

TI-2022-09014 CVE-2022-25322 · GHSA-qm9c-x9hh-pr9m

MEDIUM 54

ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09578 Published 2022-02-18 No fix listed CWE-89

TI-2021-10715 CVE-2021-30175 · GHSA-4jx4-gmpg-qw4c

MEDIUM 53

ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08548 Published 2021-04-13 No fix listed CWE-89

TI-2022-09015 CVE-2022-25323 · GHSA-qhq5-7rhv-hh2q

LOW 33

ZEROF Web Server 2.0 allows /admin.back XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03231 Published 2022-02-18 No fix listed CWE-79