Invision Power Services 脆弱性

タイムライン

タイプ

Forum Software70
Not Defined10
Photo Gallery Software6
Blog Software2

製品

Invision Power Services IP.Board66
Invision Power Services IPS6
Invision Power Services Invision Gallery6
Invision Power Services Invision Board2
Invision Power Services Invision Power Top Site Li ...2

修復

Official Fix48
Temporary Fix0
Workaround0
Unavailable8
Not Defined32

悪用可能性

High18
Functional2
Proof-of-Concept32
Unproven6
Not Defined30

アクセスベクター

Not Defined0
Physical0
Local0
Adjacent0
Network88

認証

Not Defined0
High0
Low16
None72

ユーザー操作

Not Defined0
Required42
None46

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤48
≤520
≤614
≤718
≤826
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤48
≤524
≤622
≤728
≤84
≤92
≤100

VulDB

≤10
≤20
≤30
≤48
≤526
≤612
≤714
≤826
≤92
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤80
≤92
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k10
<2k38
<5k40
<10k0
<25k0
<50k0
<100k0
≥100k0

本日のエクスプロイト

<1k88
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (9): Community Suite (6), IP.Board (56), IP.Gallery (1), IPS (3), Invision Board (4), Invision Community Blog (5), Invision Gallery (10), Invision Power Board (1), Invision Power Top Site List (1)

Link to Vendor Website: https://invisioncommunity.com/

公開済みBaseTemp脆弱性Prod悪修復EPSSCTICVE
2021年08月18日3.53.4Invision Power Services Community Suite IFRAME クロスサイトスクリプティング未知Not DefinedOfficial Fix0.000570.00CVE-2021-39250
2021年08月18日3.53.4Invision Power Services Community Suite Filename mt_rand クロスサイトスクリプティング未知Not DefinedOfficial Fix0.001050.00CVE-2021-39249
2021年06月02日5.55.3Invision Power Services Community Suite runProcessFunction 特権昇格未知Not DefinedOfficial Fix0.007450.00CVE-2021-32924
2021年01月08日7.57.2Invision Power Services Community Suite Download REST API files.php GETindex SQLインジェクション未知Not DefinedOfficial Fix0.000630.00CVE-2021-3025
2021年01月06日3.53.5Invision Power Services Community Suite Comments クロスサイトスクリプティング未知Not DefinedOfficial Fix0.000780.00CVE-2021-3026
2017年05月11日6.26.2Invision Power Services IPS SVG Document Stored 特権昇格未知Not DefinedNot Defined0.001660.00CVE-2017-8899
2017年05月11日7.07.0Invision Power Services IPS Announcement index.php Stored 特権昇格未知Not DefinedNot Defined0.001700.01CVE-2017-8898
2017年05月11日5.25.2Invision Power Services IPS UTF8 Converter index.php Reflected クロスサイトスクリプティング未知Not DefinedNot Defined0.001470.07CVE-2017-8897
2017年04月23日5.75.5Invision Power Services Community Suite Session Cookie uniqid 弱い暗号化未知Not DefinedOfficial Fix0.001790.01CVE-2016-2564
2015年09月04日5.35.1Invision Power Services IP.Board URL サービス拒否Forum SoftwareNot DefinedOfficial Fix0.001640.02CVE-2015-6812

77 非表示のエントリあり

🔒 Login Required

You need to signup and login to see more of the remaining 77 results.

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!