Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Archibus Component: Web Central Clear all filters
TI-2021-18291 CVE-2021-41554 · GHSA-4fg8-hr8g-58rr

ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests…

Priority MEDIUM 40

ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functionality in these affected endpoints: /archibus/schema/ab-edit-users.axvw, /archibus/schema/ab-data-di…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00875 Published 2021-10-05 No fix listed CWE-862
TI-2021-18292 CVE-2021-41555 · GHSA-h6fx-jmr6-xg2g

In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in…

Priority LOW 29

In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkflowRule.dwr because the data received as input from clients is re-included within the HTTP response re…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0077 Published 2021-10-05 No fix listed CWE-79