Vulnerabilities

TI-2015-04537 CVE-2015-5384 · GHSA-3phw-rjrc-v4hm

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack.

MEDIUM 41

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01525 Published 2019-04-03 No fix listed CWE-384

TI-2015-04596 CVE-2015-5462 · GHSA-wvfp-jcvv-q2mm

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to…

LOW 29

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject HTML into the scoping dashboard features.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0103 Published 2019-04-03 No fix listed CWE-74

TI-2015-04597 CVE-2015-5463 · GHSA-4jqw-xwf7-vfv3

AxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated…

MEDIUM 46

AxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated Java RMI services) 9.5.3 and earlier allows remote attackers to (1) access data of other basic users through arbitrary SQL commands…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02031 Published 2019-04-03 No fix listed CWE-285

Vulnerabilities

Filters

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack.

AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to…

AxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated…