Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Japan Total System Co.,Ltd. Component: Groupsession Bycloud Clear all filters
TI-2021-04015 CVE-2021-20789 · GHSA-pvpc-7x96-x9f5

Open redirect in Japan Total System Co.,Ltd. GroupSession

Priority LOW 29

Open redirect vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00871 Published 2021-07-28 No fix listed CWE-601
TI-2021-04014 CVE-2021-20788 · GHSA-jvhx-hc7j-xvxh

Server-side request forgery in Japan Total System Co.,Ltd. GroupSession

Priority LOW 22

Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSe…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00916 Published 2021-07-28 No fix listed CWE-918
TI-2021-04013 CVE-2021-20787 · GHSA-536v-gg7v-fc83

Cross-site scripting in Japan Total System Co.,Ltd. GroupSession

Priority LOW 23

Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION fro…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0064 Published 2021-07-28 No fix listed CWE-79
TI-2021-04012 CVE-2021-20786 · GHSA-crxm-j8cj-fgm7

Cross-site request forgery in Japan Total System Co.,Ltd. GroupSession

Priority LOW 20

Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSes…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0045 Published 2021-07-28 No fix listed CWE-352
TI-2021-04011 CVE-2021-20785 · GHSA-78vr-4c7c-9p9v

Cross-site scripting in Japan Total System Co.,Ltd. GroupSession

Priority LOW 23

Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION fro…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.006 Published 2021-07-28 No fix listed CWE-79