Vulnerabilities

TI-2022-22235 CVE-2022-45167 · GHSA-g5qg-593p-j5gq

An issue was discovered in Archibus Web Central 2022.03.01.107.

LOW 20

An issue was discovered in Archibus Web Central 2022.03.01.107.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00468 Published 2023-01-10 No fix listed CWE-200

TI-2022-22234 CVE-2022-45166 · GHSA-vfm9-f37f-c9j3

An issue was discovered in Archibus Web Central 2022.03.01.107.

LOW 29

An issue was discovered in Archibus Web Central 2022.03.01.107.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00494 Published 2023-01-10 No fix listed CWE-284

TI-2022-22233 CVE-2022-45165 · GHSA-47xh-88vf-mqw7

An issue was discovered in Archibus Web Central 2022.03.01.107.

LOW 39

An issue was discovered in Archibus Web Central 2022.03.01.107.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00662 Published 2023-01-10 No fix listed CWE-89

TI-2022-22232 CVE-2022-45164 · GHSA-jc4j-5j4g-r9cv

An issue was discovered in Archibus Web Central 2022.03.01.107.

LOW 20

An issue was discovered in Archibus Web Central 2022.03.01.107.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00423 Published 2023-01-10 No fix listed CWE-284

TI-2022-11483 CVE-2022-28862 · GHSA-ww89-94rw-5jpj

In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in…

MEDIUM 44

In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0106 Published 2022-05-25 No fix listed CWE-89

TI-2021-18290 CVE-2021-41553 · GHSA-wfm6-393x-c6r9

In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), the Web Application in…

MEDIUM 45

In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), the Web Application in /archibus/login.axvw assign a session token that could be already in use by another user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01243 Published 2021-10-05 No fix listed CWE-384

TI-2021-18291 CVE-2021-41554 · GHSA-4fg8-hr8g-58rr

ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests…

MEDIUM 40

ARCHIBUS Web Central 21.3.3.815 (a version from 2014) does not properly validate requests for access to data and functionality in these affected endpoints: /archibus/schema/ab-edit-users.axvw, /archibus/schema/ab-data-di…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00875 Published 2021-10-05 No fix listed CWE-862

TI-2021-18292 CVE-2021-41555 · GHSA-h6fx-jmr6-xg2g

In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in…

LOW 29

In ARCHIBUS Web Central 21.3.3.815 (a version from 2014), XSS occurs in /archibus/dwr/call/plaincall/workflow.runWorkflowRule.dwr because the data received as input from clients is re-included within the HTTP response re…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0077 Published 2021-10-05 No fix listed CWE-79

Vulnerabilities

Filters