Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Eic Component: E-document System Clear all filters
TI-2021-05721 CVE-2021-22860 · GHSA-whg3-7342-p9mg

EIC e-document system - Broken Authentication

Priority MEDIUM 47

EIC e-document system does not perform completed identity verification for sorting and filtering personnel data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02558 Published 2021-03-17 No fix listed CWE-287
TI-2021-05720 CVE-2021-22859 · GHSA-x9wv-c8jw-pvg5

EIC e-document system - SQL Injection

Priority MEDIUM 48

The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03751 Published 2021-03-17 No fix listed CWE-89