Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Evasys Clear all filters
TI-2023-15052 CVE-2023-31435 · GHSA-q3w6-ggw8-49fj

Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche…

Priority HIGH 70

Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire previews) in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allow authenticated attackers…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00702 Published 2023-05-02 No fix listed CWE-863
TI-2023-15051 CVE-2023-31434 · GHSA-5fv5-gvx6-w9hh

The parameters nutzer_titel, nutzer_vn, and nutzer_nn in the user profile, and langID and…

Priority LOW 25

The parameters nutzer_titel, nutzer_vn, and nutzer_nn in the user profile, and langID and ONLINEID in direct links, in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 do not validate input, which allows authen…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00468 Published 2023-05-02 No fix listed CWE-79