Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Priority LOW 23

ISOinsight developed by NetVision Information has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00245 Published 2025-12-30 Fixed in 2.9.0.250911, 3.0.0.251127 CWE-79
Priority LOW 27

NetVision Information ISOinsight has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript code in the user's browser through phishing techniques.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00324 Published 2025-02-11 Fixed in 2.9.0.241231, 3.0.0.241231 CWE-79
Priority MEDIUM 42

The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00971 Published 2025-01-16 Fixed in 2.9.0.241231, 3.0.0.241231 CWE-78
Priority MEDIUM 50

The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve * all accounts and passwords.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00844 Published 2025-01-16 Fixed in 2.9.0.241231, 3.0.0.241231 CWE-306
Priority MEDIUM 50

The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00566 Published 2025-01-16 Fixed in 2.9.0.241231, 3.0.0.241231 CWE-89