Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Plunet Component: Business Manager Clear all filters
TI-2009-00667 CVE-2009-0700 · GHSA-6h2q-7gh7-pc6c

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access…

Priority LOW 24

Plunet BusinessManager 4.1 and earlier allows remote authenticated users to bypass access restrictions and (1) read sensitive Customer or Order data via a modified Pfad parameter to pagesUTF8/Sys_DirAnzeige.jsp, or (2) l…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02511 Published 2009-02-23 No fix listed CWE-264
TI-2009-00666 CVE-2009-0699 · GHSA-rjc8-j2rv-vwfj

Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in pagesUTF8/auftrag_allgemeinauftrag.jsp in Plunet BusinessManager 4.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the (1) QUB and (2…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01263 Published 2009-02-23 No fix listed CWE-79