TI-2023-18902 CVE-2023-37272
XSS vulnerability in JOC Cockpit branch 1.13
Priority LOW 28
JS7 is an Open Source Job Scheduler.
Vulnerabilities
5 records
TI-2020-10107 CVE-2020-12712 · GHSA-w8q7-623v-pvjv
A vulnerability based on insecure user/password encryption in the JOE (job editor)…
Priority MEDIUM 43
A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows attackers to decrypt the user/password that is optionally stored with a user's profile…
TI-2020-05560 CVE-2020-6855 · GHSA-547f-rmfj-7xhg
A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler…
Priority LOW 31
A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to parameterize housekeeping jobs in a way that exhausts system resources and results in a denial o…
TI-2020-05561 CVE-2020-6856 · GHSA-p9v4-8pgw-x8xr
An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS…
Priority LOW 31
An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read files from the server via an entity declaration in any of the XML documents that…
TI-2020-05559 CVE-2020-6854 · GHSA-f299-j7j4-m9w9
A cross-site scripting (XSS) vulnerability in the JOC Cockpit component of SOS…
Priority LOW 25
A cross-site scripting (XSS) vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to inject arbitrary web script or HTML via JSON properties available from the REST API.