Vulnerabilities

TI-2022-08115 CVE-2022-24177 · GHSA-358j-rpm7-39m5

A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris…

LOW 28

A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris ALEPH 500 v18.1 and v20 allows attackers to execute arbitrary web scripts or HTML.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2022-03-07 No fix listed CWE-79

TI-2014-03033 CVE-2014-3719 · GHSA-gmmh-3g4p-ff75

Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500…

MEDIUM 46

Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the (1) find, (2) lib,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0199 Published 2020-01-30 No fix listed CWE-89

TI-2014-03032 CVE-2014-3718 · GHSA-h5qj-28x8-2vqr

Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris…

LOW 29

Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris ALEPH 500 (Integrated library management system) 18.1 and 20 allow remote attackers to inject arbitrary web script or HTML via the (1)…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00968 Published 2020-01-30 No fix listed CWE-79

Vulnerabilities

Filters

A cross-site scripting (XSS) vulnerability in the component cgi-bin/ej.cgi of Ex libris…

Multiple SQL injection vulnerabilities in cgi-bin/review_m.cgi in Ex Libris ALEPH 500…

Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/tag_m.cgi in Ex Libris…