Vulnerabilities

TI-2019-13014 CVE-2019-17428 · GHSA-vj8w-5833-f867

An issue was discovered in Intesync Solismed 3.3sp1.

LOW 27

An issue was discovered in Intesync Solismed 3.3sp1.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0065 Published 2019-12-12 No fix listed CWE-327

TI-2019-12228 CVE-2019-16246 · GHSA-222g-mvfx-v2wm

MEDIUM 48

Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03332 Published 2019-12-12 No fix listed CWE-22

TI-2019-11980 CVE-2019-15936 · GHSA-2486-25fw-2vf4

MEDIUM 47

Intesync Solismed 3.3sp allows Insecure File Upload.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02356 Published 2019-12-12 No fix listed CWE-434

TI-2019-11979 CVE-2019-15935 · GHSA-6x4q-jqqf-cmgc

LOW 30

Intesync Solismed 3.3sp has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01308 Published 2019-12-12 No fix listed CWE-79

TI-2019-11978 CVE-2019-15934 · GHSA-64mr-xx4w-8f6p

MEDIUM 40

Intesync Solismed 3.3sp has CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00856 Published 2019-12-12 No fix listed CWE-352

TI-2019-11977 CVE-2019-15933 · GHSA-rjcj-6r8p-9533

MEDIUM 46

Intesync Solismed 3.3sp has SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01997 Published 2019-12-12 No fix listed CWE-89

TI-2019-11976 CVE-2019-15932 · GHSA-26qq-9jw6-r5h4

MEDIUM 47

Intesync Solismed 3.3sp has Incorrect Access Control.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02328 Published 2019-12-12 No fix listed CWE-306

TI-2019-11975 CVE-2019-15931 · GHSA-hpf3-9554-j2mf

MEDIUM 47

Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02725 Published 2019-12-12 No fix listed CWE-22

TI-2019-11974 CVE-2019-15930 · GHSA-388c-5882-28g4

LOW 23

Intesync Solismed 3.3sp allows Clickjacking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01384 Published 2019-12-12 No fix listed CWE-1021