Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

TI-2022-18427 CVE-2022-39035 · GHSA-4v6p-4fvv-f67q

Smart eVision - Stored XSS

Priority LOW 28

Smart eVision has insufficient filtering for special characters in the POST Data parameter in the specific function.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00621 Published 2022-09-28 No fix listed CWE-79
TI-2022-18426 CVE-2022-39034 · GHSA-4x42-9v2h-3jxc

Smart eVision - Path Traversal -2

Priority LOW 32

Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01473 Published 2022-09-28 No fix listed CWE-22
TI-2022-18425 CVE-2022-39033 · GHSA-gxf3-5gjm-vcfh

Smart eVision - Path Traversal -1

Priority MEDIUM 53

Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01842 Published 2022-09-28 No fix listed CWE-22
Priority MEDIUM 42

Smart eVision has an improper privilege management vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00907 Published 2022-09-28 No fix listed CWE-269