Vulnerabilities

TI-2024-09697 CVE-2024-10469 · GHSA-59xx-g8cv-87qw

CERT/CC VINCE versions before 3.0.9 allows authenticated user to access User Management view.

LOW 28

VINCE versions before 3.0.9 is vulnerable to exposure of User information to authenticated users.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00183 Published 2024-10-28 Fixed in 3.0.9 CWE-276

TI-2024-09236 CVE-2024-9953 · GHSA-gjpq-5jrr-h6wr

LOW 23

A potential denial-of-service (DoS) vulnerability exists in CERT VINCE software versions prior to 3.0.8.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00442 Published 2024-10-14 Fixed in 3.0.8 CWE-502

TI-2022-19099 CVE-2022-40238 · GHSA-9gw9-mrm5-m5x9

MEDIUM 43

A Remote Code Injection vulnerability exists in CERT software prior to version 1.50.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01483 Published 2022-10-26 Fixed in 1.50.5 CWE-502

TI-2022-19104 CVE-2022-40257 · GHSA-3g24-rv7h-5xh5

LOW 25

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00443 Published 2022-10-10 Fixed in 1.50.4 CWE-74

TI-2022-19102 CVE-2022-40248 · GHSA-hjm9-vw3p-4gv8

LOW 25

An HTML injection vulnerability exists in CERT/CC VINCE software prior to 1.50.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00463 Published 2022-10-10 Fixed in 1.50.4 CWE-74

TI-2022-09370 CVE-2022-25799 · GHSA-wjw7-pcj2-4prm

LOW 28

An open redirect vulnerability exists in CERT/CC VINCE software prior to 1.50.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00602 Published 2022-08-16 Fixed in 1.50.0 CWE-601