Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

TI-2021-11745 CVE-2021-31678 · GHSA-xp69-6p8j-w8m5

An issue was discovered in PESCMS-V2.3.3.

Priority LOW 30

An issue was discovered in PESCMS-V2.3.3.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00556 Published 2022-07-06 No fix listed CWE-352
TI-2021-11746 CVE-2021-31679 · GHSA-r5hg-3j55-799q

An issue was discovered in PESCMS-V2.3.3.

Priority LOW 30

An issue was discovered in PESCMS-V2.3.3.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00564 Published 2022-07-06 No fix listed CWE-352
TI-2021-11744 CVE-2021-31677 · GHSA-hjwh-qg8v-mp9r

An issue was discovered in PESCMS-V2.3.3.

Priority LOW 30

An issue was discovered in PESCMS-V2.3.3.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0059 Published 2022-07-06 No fix listed CWE-352
Priority LOW 32

PESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&m=Task&a=my&status=0&id=,?g=Team&m=Task&a=my&status=1&id=,?g=Team&m=Task&a=my&status=10&id=

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0269 Published 2020-11-17 No fix listed CWE-79
Priority LOW 28

PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=User_group&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00707 Published 2018-09-03 No fix listed CWE-79