Vulnerabilities

TI-2017-01475 CVE-2017-2175 · GHSA-c2j7-mgrp-5g3p

Untrusted search path in INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Empirical…

LOW 37

Untrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.01419 Published 2017-05-22 No fix listed CWE-426

TI-2017-01474 CVE-2017-2174 · GHSA-5464-6c37-jhrh

Cross-site scripting in INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Empirical…

LOW 30

Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01195 Published 2017-05-22 No fix listed CWE-79

TI-2017-01473 CVE-2017-2173 · GHSA-7xhp-wpfc-fw6v

Cross-site scripting in INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Empirical…

LOW 26

Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00891 Published 2017-05-22 No fix listed CWE-79

Vulnerabilities

Filters

Untrusted search path in INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Empirical…

Cross-site scripting in INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Empirical…

Cross-site scripting in INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Empirical…