Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Tine20 Component: Tine 2.0 Clear all filters
TI-2017-10947 CVE-2017-14923 · GHSA-8p7x-6v2f-7qv5

Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community…

Priority LOW 26

Stored XSS vulnerability via IMG element at "Leadname" of CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the application admi…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00926 Published 2017-09-29 No fix listed CWE-79
TI-2017-10946 CVE-2017-14922 · GHSA-hgwx-q73m-3qhx

Stored XSS vulnerability via IMG element at "History" of Profile, Calendar, Tasks, and…

Priority LOW 26

Stored XSS vulnerability via IMG element at "History" of Profile, Calendar, Tasks, and CRM in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rend…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00907 Published 2017-09-29 No fix listed CWE-79
TI-2017-10945 CVE-2017-14921 · GHSA-q55m-8f9f-jgg3

Stored XSS vulnerability via IMG element at "Filename" of Filemanager in Tine 2.0…

Priority LOW 26

Stored XSS vulnerability via IMG element at "Filename" of Filemanager in Tine 2.0 Community Edition before 2017.08.4 allows an authenticated user to inject JavaScript, which is mishandled during rendering by the applicat…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00926 Published 2017-09-29 No fix listed CWE-79