Vulnerabilities

TI-2020-17329 CVE-2020-28597 · GHSA-9vx8-499f-5qv7

A predictable seed vulnerability exists in the password reset functionality of Epignosis…

LOW 35

A predictable seed vulnerability exists in the password reset functionality of Epignosis EfrontPro 5.2.21.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01072 Published 2021-03-03 No fix listed CWE-337

TI-2019-03531 CVE-2019-5070 · GHSA-wgfg-7qh2-xjxr

LOW 31

An exploitable SQL injection vulnerability exists in the unauthenticated portion of eFront LMS, versions v5.2.12 and earlier.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01025 Published 2019-09-05 No fix listed CWE-89

TI-2019-03530 CVE-2019-5069 · GHSA-hxq6-qv9r-2gqc

MEDIUM 42

A code execution vulnerability exists in Epignosis eFront LMS v5.2.12.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0228 Published 2019-09-05 No fix listed CWE-502