Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

Vendor: TrueConf Component: Server Clear all filters
TI-2022-23125 CVE-2022-46764 · GHSA-m533-gv9w-rfq5

SQL injection in TrueConf Server

Priority MEDIUM 53

A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0232 Published 2022-12-27 Fixed in 5.2.6.10025 CWE-89
TI-2022-23124 CVE-2022-46763 · GHSA-p2j5-ch58-jpmw

SQL injection in TrueConf Server

Priority MEDIUM 42

A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting i…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01156 Published 2022-12-27 Fixed in 5.2.6.10025 CWE-89
TI-2017-14185 CVE-2017-20119 · GHSA-fx47-prh9-mj6x

TrueConf Server change-lang redirect

Priority MEDIUM 60

A vulnerability classified as problematic has been found in TrueConf Server 4.3.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00726 Published 2022-06-29 No fix listed CWE-601
TI-2017-14184 CVE-2017-20118 · GHSA-3m77-wvgm-wjf3

TrueConf Server DOM cross site scripting

Priority MEDIUM 58

A vulnerability was found in TrueConf Server 4.3.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80
TI-2017-14183 CVE-2017-20117 · GHSA-7x9g-vgx6-j7ch

TrueConf Server group DOM cross site scripting

Priority MEDIUM 58

A vulnerability was found in TrueConf Server 4.3.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80
TI-2017-14182 CVE-2017-20116 · GHSA-pp22-gvh9-5p2m

TrueConf Server Reflected cross site scripting

Priority MEDIUM 58

A vulnerability was found in TrueConf Server 4.3.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80
TI-2017-14181 CVE-2017-20115 · GHSA-8pcc-94cg-8pr4

TrueConf Server Reflected cross site scripting

Priority MEDIUM 58

A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80
TI-2017-14180 CVE-2017-20114 · GHSA-6p68-6r83-gc73

TrueConf Server Reflected cross site scripting

Priority MEDIUM 58

A vulnerability has been found in TrueConf Server 4.3.7 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80
TI-2017-14179 CVE-2017-20113 · GHSA-5hj6-g43j-3gj5

TrueConf Server Stored cross site scripting

Priority MEDIUM 58

A vulnerability, which was classified as problematic, was found in TrueConf Server 4.3.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00622 Published 2022-06-29 No fix listed CWE-80