Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Becton, Dickinson and Company (BD) Component: Performa Clear all filters
TI-2018-07484 CVE-2018-10595 · GHSA-vjxw-9cfw-2hcr

SQL injection in Becton, Dickinson and Company (BD) Kiestra and InoqulA systems

Priority LOW 28

A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands…

CVSS 3.0MEDIUM 6.3 Adjacent network High privileges User interaction EPSS 0.00407 Published 2018-05-24 No fix listed CWE-356
TI-2018-07482 CVE-2018-10593 · GHSA-gjwf-hgg5-m3rx

SQL injection in Becton, Dickinson and Company (BD) Kiestra and InoqulA systems

Priority LOW 25

A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and Ino…

CVSS 3.0MEDIUM 5.6 Adjacent network High privileges User interaction EPSS 0.00361 Published 2018-05-24 No fix listed CWE-356
TI-2017-03932 CVE-2017-6022 · GHSA-8q2j-7m4j-w338

Hard-coded credentials in BD Kiestra PerformA and KLA Journal Service

Priority MEDIUM 46

A hard-coded password issue was discovered in Becton, Dickinson and Company (BD) PerformA, Version 2.0.14.0 and prior versions, and KLA Journal Service, Version 1.0.51 and prior versions.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01752 Published 2017-06-30 No fix listed CWE-259