Invision Power Services Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Forum Software	64
Not Defined	16
Photo Gallery Software	6
Blog Software	2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Invision Power Services IP.Board	60
Invision Power Services Community Suite	12
Invision Power Services Invision Gallery	6
Invision Power Services Invision Board	2
Invision Power Services Invision Community Blog	2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Remediation

Official fix	50
Temporary fix	0
Workaround	0
Not available	6
Not defined	32

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploitability

Attacked	0
Highly functional	18
Functional	0
Proof-of-Concept	30
Unproven	2
Not defined	38

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Access Vector

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	86

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Authentication

Not Defined	0
High	0
Low	20
None	68

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

User Interaction

Not Defined	0
Required	42
None	46

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

C3BM Index

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	14
≤5	22
≤6	14
≤7	14
≤8	22
≤9	2
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	16
≤5	22
≤6	22
≤7	20
≤8	6
≤9	2
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

VulDB

≤1	0
≤2	0
≤3	0
≤4	14
≤5	24
≤6	14
≤7	14
≤8	20
≤9	2
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	0
≤9	4
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit 0-day

<1k	12
<2k	48
<5k	28
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Today

<1k	88
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Market Volume

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

🔴 CTI Activities

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Affected Products (9): Community Suite (6), IP.Board (56), IP.Gallery (1), IPS (3), Invision Board (4), Invision Community Blog (5), Invision Gallery (10), Invision Power Board (1), Invision Power Top Site List (1)

Link to Vendor Website: https://invisioncommunity.com/

Published	Base	Temp	Vulnerability	Prod	Exp	Cou	EPSS	CTI	CVE
08/18/2021	3.5	3.4	Invision Power Services Community Suite IFRAME cross site scripting	Unknown	Not defined	Official fix	0.00755	0.00	CVE-2021-39250
08/18/2021	3.5	3.4	Invision Power Services Community Suite Filename mt_rand cross site scripting	Unknown	Not defined	Official fix	0.00337	0.05	CVE-2021-39249
06/02/2021	5.5	5.3	Invision Power Services Community Suite runProcessFunction code injection	Unknown	Not defined	Official fix	0.03990	0.00	CVE-2021-32924
01/08/2021	7.5	7.2	Invision Power Services Community Suite Download REST API files.php GETindex sql injection	Unknown	Not defined	Official fix	0.00482	0.00	CVE-2021-3025
01/06/2021	3.5	3.5	Invision Power Services Community Suite Comments cross site scripting	Unknown	Not defined	Official fix	0.00359	0.08	CVE-2021-3026
05/11/2017	6.2	6.2	Invision Power Services IPS SVG Document Stored access control	Unknown	Not defined	Not defined	0.00559	0.03	CVE-2017-8899
05/11/2017	7.0	7.0	Invision Power Services IPS Announcement index.php Stored access control	Unknown	Not defined	Not defined	0.00559	0.08	CVE-2017-8898
05/11/2017	5.2	5.2	Invision Power Services IPS UTF8 Converter index.php Reflected cross site scripting	Unknown	Not defined	Not defined	0.00285	0.00	CVE-2017-8897
04/23/2017	5.7	5.5	Invision Power Services Community Suite Session Cookie uniqid entropy	Unknown	Not defined	Official fix	0.00287	0.00	CVE-2016-2564
09/04/2015	5.3	5.1	Invision Power Services IP.Board URL resource management	Forum Software	Not defined	Official fix	0.00491	0.02	CVE-2015-6812

77 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 77 results.

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!