Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Hundred Plus Component: 101eip Clear all filters
TI-2021-12214 CVE-2021-32540 · GHSA-w398-xm3m-xwv3

Hundred Plus 101EIP - Stored XSS-2

Priority LOW 25

Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to inject JavaScript and perform a stored XSS attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00456 Published 2021-05-28 No fix listed CWE-79
TI-2021-12213 CVE-2021-32539 · GHSA-3m84-frcg-8xgf

Hundred Plus 101EIP - Stored XSS-1

Priority LOW 25

Add event in calendar function in the 101EIP system does not filter special characters in specific fields, which allows remote authenticated users to inject JavaScript and perform a stored XSS attack.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00586 Published 2021-05-28 No fix listed CWE-79