Vulnerabilities

TI-2014-02279 CVE-2014-2843 · GHSA-hf89-j5g5-5g8w

Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36…

LOW 29

Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0103 Published 2020-01-31 No fix listed CWE-79

TI-2014-01766 CVE-2014-2233 · GHSA-5845-9wxx-5wxg

Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite…

LOW 27

Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to trigger requests to intranet servers via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02034 Published 2014-12-01 No fix listed

TI-2014-01765 CVE-2014-2232 · GHSA-77r3-2xp4-rrj3

Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36…

LOW 26

Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01348 Published 2014-12-01 No fix listed CWE-21

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in infoware MapSuite MapAPI 1.0.x before 1.0.36…

Server-side request forgery (SSRF) vulnerability in the MapAPI in Infoware MapSuite…

Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36…