Vendors / Zucchetti Records 22 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 11
Exploited now Zucchetti records in CISA KEV No Zucchetti vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 42
Zucchetti InfoBusiness before and including 4.4.1 allows any authenticated user to upload .php files in order to achieve code execution.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0173 · Published 2019-10-30 · No fix listed CWE-434
Priority LOW 38
A cross-site request forgery (CSRF) vulnerability in Zucchetti InfoBusiness before and including 4.4.1 allows arbitrary file upload.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00457 · Published 2019-10-30 · No fix listed CWE-352
Priority LOW 28
Multiple Reflected Cross-site Scripting (XSS) vulnerabilities exist in Zucchetti InfoBusiness before and including 4.4.1.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00668 · Published 2019-10-30 · No fix listed CWE-79
Priority LOW 25
In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00516 · Published 2019-10-30 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 11 10 0 0
THREATIST.IORead the docs