Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: Epesi Clear all filters
TI-2017-07022 CVE-2017-9621 · GHSA-rv34-2hcq-q759

Cross-site scripting (XSS) vulnerability in…

Priority LOW 29

Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) or…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01037 Published 2017-06-14 No fix listed CWE-79
TI-2017-06790 CVE-2017-9366 · GHSA-647m-2qfw-99jq

Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in…

Priority LOW 23

Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Base/Dashboard/Dashboard_0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted tab_name…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00668 Published 2017-06-02 No fix listed CWE-79
TI-2017-06759 CVE-2017-9331 · GHSA-hmjj-63mp-r28c

The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting…

Priority LOW 26

The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Utils/RecordBrowser/RecordBrowserCommon_0.php, which allows remote attackers to inject arbitrary we…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00664 Published 2017-06-01 No fix listed CWE-79