Sensiolabs Schwachstellen

Zeitverlauf

Typ

Produkt

SensioLabs Symfony22

Massnahmen

Official Fix22
Temporary Fix0
Workaround0
Unavailable0
Not Defined0

Ausnutzbarkeit

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined22

Zugriffsart

Not Defined0
Physical0
Local0
Adjacent0
Network22

Authentisierung

Not Defined0
High0
Low0
None22

Benutzeraktivität

Not Defined0
Required4
None18

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤64
≤78
≤86
≤94
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤64
≤712
≤82
≤94
≤100

VulDB

≤10
≤20
≤30
≤40
≤52
≤66
≤72
≤812
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤74
≤84
≤92
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k2
<2k10
<5k8
<10k2
<25k0
<50k0
<100k0
≥100k0

Exploit heute

<1k22
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (1): Symfony (21)

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
13.06.20185.75.6SensioLabs Symfony Web Profiler Reflected Cross Site ScriptingProgramming Tool SoftwareNot DefinedOfficial Fix0.001780.03CVE-2018-12040
13.06.20186.66.5SensioLabs Symfony Security RedirectProgramming Tool SoftwareNot DefinedOfficial Fix0.004980.00CVE-2018-11408
13.06.20188.58.2SensioLabs Symfony Incomplete Fix CVE-2016-2403 schwache AuthentisierungProgramming Tool SoftwareNot DefinedOfficial Fix0.006210.00CVE-2018-11407
13.06.20186.56.4SensioLabs Symfony Security Cross Site Request ForgeryProgramming Tool SoftwareNot DefinedOfficial Fix0.002830.03CVE-2018-11406
13.06.20184.84.7SensioLabs Symfony HttpFoundation PDOSessionHandler schwache AuthentisierungProgramming Tool SoftwareNot DefinedOfficial Fix0.005560.00CVE-2018-11386
13.06.20186.86.7SensioLabs Symfony Security schwache AuthentisierungProgramming Tool SoftwareNot DefinedOfficial Fix0.005140.00CVE-2018-11385
13.06.20186.66.5SensioLabs Symfony DefaultAuthenticationFailureHandler RedirectProgramming Tool SoftwareNot DefinedOfficial Fix0.001010.03CVE-2017-16652
07.02.20178.58.2SensioLabs Symfony schwache AuthentisierungProgramming Tool SoftwareNot DefinedOfficial Fix0.005820.00CVE-2016-2403
01.06.20166.46.3SensioLabs Symfony Session UsernamePasswordFormAuthenticationListener.php attemptAuthentication Denial of ServiceProgramming Tool SoftwareNot DefinedOfficial Fix0.010450.02CVE-2016-4423
01.06.20167.47.2SensioLabs Symfony SecureRandom Class SecureRandom.php nextBytes schwache VerschlüsselungProgramming Tool SoftwareNot DefinedOfficial Fix0.001690.02CVE-2016-1902

11 weitere Einträge werden nicht mehr angezeigt

Want to stay up to date on a daily basis?

Enable the mail alert feature now!