Vulnerabilities

TI-2020-12803 CVE-2020-16278 · GHSA-4jpm-gf9p-whpf

A cross-site scripting (XSS) vulnerability in the Permissions component in SAINT Security…

LOW 28

A cross-site scripting (XSS) vulnerability in the Permissions component in SAINT Security Suite 8.0 through 9.8.20 could allow arbitrary script to run in the context of a logged-in user when the user clicks on a speciall…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2020-08-10 No fix listed CWE-79

TI-2020-12802 CVE-2020-16277 · GHSA-cq6w-8339-ph8x

An SQL injection vulnerability in the Analytics component of SAINT Security Suite 8.0…

MEDIUM 40

An SQL injection vulnerability in the Analytics component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, authenticated attacker to gain unauthorized access to the database.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0118 Published 2020-08-10 No fix listed CWE-89

TI-2020-12801 CVE-2020-16276 · GHSA-cx37-rm6g-whq9

An SQL injection vulnerability in the Assets component of SAINT Security Suite 8.0…

MEDIUM 40

An SQL injection vulnerability in the Assets component of SAINT Security Suite 8.0 through 9.8.20 allows a remote, authenticated attacker to gain unauthorized access to the database.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0118 Published 2020-08-10 No fix listed CWE-89

TI-2020-12800 CVE-2020-16275 · GHSA-xh36-cr78-92jc

A cross-site scripting (XSS) vulnerability in the Credential Manager component in SAINT…