Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: SoftCOM Clear all filters
TI-2024-33195 CVE-2024-49709 · GHSA-95gw-69j9-7r85

XSS in iKSORIS

Priority LOW 11

Internet Starter, one of SoftCOM iKSORIS system modules, allows for setting an arbitrary session cookie value.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00219 Published 2025-04-14 Fixed in 79.0 CWE-384
TI-2024-33194 CVE-2024-49708 · GHSA-cmwr-c23h-p93f

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00236 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-33193 CVE-2024-49707 · GHSA-7rcm-6m36-qrf5

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00249 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-33192 CVE-2024-49706 · GHSA-rpmh-5wh2-6x37

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Open Redirect attacks by including base64 encoded URLs in the target parameter sent in a POST request to one of the endpoints.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00332 Published 2025-04-14 Fixed in 79.0 CWE-601
TI-2024-33191 CVE-2024-49705 · GHSA-mhgm-r3r5-6cwp

XSS in iKSORIS

Priority LOW 24

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of Servise (DoS) attacks.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00332 Published 2025-04-14 Fixed in 79.0 CWE-248
TI-2024-12639 CVE-2024-13598 · GHSA-vrc8-xx22-hwgx

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00249 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-12638 CVE-2024-13597 · GHSA-v334-7q67-v4rm

XSS in iKSORIS

Priority LOW 24

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00421 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-09353 CVE-2024-10090 · GHSA-x45f-24vr-952q

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00249 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-09352 CVE-2024-10089 · GHSA-h34x-fr9h-4xrf

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00236 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-09351 CVE-2024-10088 · GHSA-ph7p-prrv-6wj5

XSS in iKSORIS

Priority LOW 23

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00249 Published 2025-04-14 Fixed in 79.0 CWE-79
TI-2024-09350 CVE-2024-10087 · GHSA-j848-rv24-jm27

XSS in iKSORIS

Priority LOW 24

Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0025 Published 2025-04-14 Fixed in 79.0 CWE-79