Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: SysJust Component: Cts Web Clear all filters
TI-2021-12217 CVE-2021-32543 · GHSA-jpr6-p297-4w5g

SysJust CTS Web - Broken Authentication

Priority LOW 30

The CTS Web transaction system related to authentication management is implemented incorrectly.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00761 Published 2021-05-28 No fix listed CWE-287
TI-2021-12216 CVE-2021-32542 · GHSA-f5hm-hjxq-fhw3

SysJust CTS Web - Reflected XSS

Priority LOW 28

The parameters of the specific functions in the CTS Web trading system do not filter special characters, which allows unauthenticated attackers can remotely perform reflected XSS and obtain the users’ connection token th…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00681 Published 2021-05-28 No fix listed CWE-79
TI-2021-12215 CVE-2021-32541 · GHSA-549f-vmr8-2vjf

SysJust CTS Web - Broken Access Control

Priority LOW 27

The CTS Web transaction system related to authentication and session management is implemented incorrectly, which allows remote unauthenticated attackers can send a large number of valid usernames, and force those logged…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01511 Published 2021-05-28 No fix listed CWE-287