Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: General-solutions Component: Contwise Case2 Clear all filters
TI-2023-19284 CVE-2023-37829 · GHSA-85j3-cv7j-8cxm

A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3…

Priority LOW 27

A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the notification.mess…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00407 Published 2023-09-01 No fix listed CWE-79
TI-2023-19283 CVE-2023-37828 · GHSA-fjx8-vjm4-2pff

A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3…

Priority LOW 27

A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Tasktyp parameter…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00357 Published 2023-09-01 No fix listed CWE-79
TI-2023-19282 CVE-2023-37827 · GHSA-75m3-r37g-fw75

A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3…

Priority LOW 28

A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the executionBlockNam…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00451 Published 2023-09-01 No fix listed CWE-79
TI-2023-19281 CVE-2023-37826 · GHSA-7hjf-4w8q-wfc6

A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3…

Priority LOW 27

A cross-site scripting (XSS) vulnerability in General Solutions Steiner GmbH CASE 3 Taskmanagement V 3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fieldname paramet…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00357 Published 2023-09-01 No fix listed CWE-79