Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Evergreen-ils Component: Evergreen Clear all filters
TI-2015-01965 CVE-2015-2204 · GHSA-6v37-3383-r5jw

Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote…

Priority LOW 38

Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to bypass an intended access restriction and obtain sensitive information about org unit settings by leveraging failure of open-i…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0311 Published 2018-02-01 No fix listed CWE-200
TI-2013-06087 CVE-2013-7435 · GHSA-xv8j-v7c6-7mjc

The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x…

Priority LOW 33

The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to obtain sensitive settings history information by leveraging lack of user permission for retriev…

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02161 Published 2018-02-01 No fix listed CWE-200