Six Apart Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined	16
Cloud Software	1

Produkt

Six Apart Movable Type	15
Six Apart Movable Type Premium	2
Six Apart Movable Type Premium Advanced	2
Six Apart Movable Type 7	1
Six Apart Movable Type Advanced 7	1

Przeciwdziałanie

Official Fix	12
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	5

Wykorzystywanie

High	1
Functional	0
Proof-of-Concept	4
Unproven	1
Not Defined	11

Wektor dostępu

Not Defined	0
Physical	0
Local	1
Adjacent	1
Network	15

Uwierzytelnianie

Not Defined	0
High	0
Low	3
None	14

Interakcja z użytkownikiem

Not Defined	0
Required	12
None	5

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	9
≤6	2
≤7	3
≤8	1
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	5
≤5	6
≤6	5
≤7	0
≤8	1
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	3
≤5	8
≤6	3
≤7	3
≤8	0
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	1
≤7	0
≤8	0
≤9	0
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	2
<2k	13
<5k	2
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	17
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (8): Movable Type (16), Movable Type 7 (1), Movable Type Advanced (1), Movable Type Advanced 7 (1), Movable Type Cloud Edition (1), Movable Type Premium (2), Movable Type Premium Advanced (2), Movable Type Premium Cloud Edition (1)

Opublikowano	Base	Temp	Słaby punkt	Prod	Wyk	Prz	EPSS	CTI	CVE
2023-10-30	4.4	4.4	Six Apart Movable Type 7 cross site scripting	Cloud Software	Not Defined	Official Fix	0.00048	0.00	CVE-2023-45746
2022-08-24	7.6	7.5	Six Apart Movable Type XMLRPC API privilege escalation	Nieznany	Not Defined	Official Fix	0.00225	0.00	CVE-2022-38078
2009-07-17	4.3	3.9	Six Apart Movable Type mt-wizard.cgi cross site scripting	Nieznany	Proof-of-Concept	Official Fix	0.00254	0.00	CVE-2009-2492
2009-07-16	6.5	5.7	Six Apart Movable Type Access Restriction mt-wizard.cgi weak authentication	Nieznany	Proof-of-Concept	Official Fix	0.00445	0.00	CVE-2009-2481
2008-10-20	3.5	3.4	Six Apart Movable Type cross site scripting	Nieznany	High	Official Fix	0.00112	0.00	CVE-2008-4634
2008-09-15	4.3	4.3	Six Apart Movable Type cross site scripting	Nieznany	Not Defined	Not Defined	0.00220	0.00	CVE-2008-4079
2007-01-29	6.3	6.0	Six Apart Ltd Movable Type cross site scripting	Nieznany	Not Defined	Official Fix	0.00362	0.00	CVE-2007-0604
2007-01-26	4.3	4.1	Six Apart Movable Type cross site scripting	Nieznany	Not Defined	Official Fix	0.00268	0.00	CVE-2007-3342
2007-01-05	6.3	6.0	Six Apart Movable Type cross site scripting	Nieznany	Proof-of-Concept	Not Defined	0.01603	0.00	CVE-2007-0231
2006-09-26	4.3	3.9	Six Apart Movable Type search cross site scripting	Nieznany	Proof-of-Concept	Official Fix	0.00404	0.00	CVE-2006-5080

7 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 7 results.

◂ PoprzedniPrzeglądKolejny ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!