Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: National Keep Cyber Security Services Component: Cybermath Clear all filters
TI-2024-06583 CVE-2024-7108 · GHSA-rfp4-4g5j-5jgh

Incorrect Authorization in National Keep's CyberMath

Priority LOW 35

Incorrect Authorization vulnerability in National Keep Cyber Security Services CyberMath allows Accessing Functionality Not Properly Constrained by ACLs.

CVSS 4.0HIGH 8.2 Local Low privileges No interaction EPSS 0.00277 Published 2024-09-26 Fixed in CYBM.240816253 CWE-863
TI-2024-06582 CVE-2024-7107 · GHSA-x57q-r8qm-5vxr

Directory Traversal in National Keep's CyberMath

Priority LOW 30

Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath allows Collect Data from Common Resource Locations.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00285 Published 2024-09-26 Fixed in CYBM.240816253 CWE-552
TI-2023-06106 CVE-2023-6676 · GHSA-w57g-4hpj-6p36

Cross Site Request Forgery in National Keep's CyberMath

Priority MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in National Keep Cyber Security Services CyberMath allows Cross Site Request Forgery.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0029 Published 2024-02-02 Fixed in v1.5 CWE-352
TI-2023-06105 CVE-2023-6675 · GHSA-42fh-xcj5-fxwg

Malicious File Upload in National Keep's CyberMath

Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in National Keep Cyber Security Services CyberMath allows Upload a Web Shell to a Web Server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00579 Published 2024-02-02 Fixed in v1.5 CWE-434
TI-2023-06104 CVE-2023-6673 · GHSA-q45w-f72f-v464

Reflected XSS in National Keep's CyberMath

Priority LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cyber Security Services CyberMath allows Reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00331 Published 2024-02-02 Fixed in v1.5 CWE-79
TI-2023-06103 CVE-2023-6672 · GHSA-439f-fqrh-gmv2

Stored XSS in National Keep's CyberMath

Priority LOW 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in National Keep Cyber Security Services CyberMath allows Stored XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00292 Published 2024-02-02 Fixed in v1.5 CWE-79