Exponent Cms Уязвимости

Версия

2.3.9	22
2.3.0	10
2.3.1	10
2.3.2	10
2.3.3	10

Устранение последствий

Official Fix	52
Temporary Fix	0
Workaround	0
Unavailable	2
Not Defined	16

Эксплуатационная пригодность

High	2
Functional	0
Proof-of-Concept	12
Unproven	0
Not Defined	56

Вектор доступа

Not Defined	0
Physical	0
Local	2
Adjacent	2
Network	66

Аутентификация

Not Defined	0
High	0
Low	16
None	54

Взаимодействие с пользователем

Not Defined	0
Required	8
None	62

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	8
≤5	0
≤6	10
≤7	4
≤8	12
≤9	28
≤10	8

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	8
≤5	2
≤6	8
≤7	8
≤8	8
≤9	30
≤10	6

VulDB

≤1	0
≤2	0
≤3	0
≤4	8
≤5	2
≤6	8
≤7	4
≤8	38
≤9	2
≤10	8

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	2
≤8	10
≤9	2
≤10	32

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Поставщик

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Эксплойт 0-дня

<1k	4
<2k	26
<5k	40
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Эксплойт сегодня

<1k	68
<2k	2
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (49): 0.94, 0.95, 0.96.1, 0.96.3, 0.96.4, 0.96.5 Rc1, 0.96.6 Alpha, 0.97, 0.98, 0.99, 2, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.2, 2.2.1, 2.3, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.6, 2.3.7, 2.3.7 Patch 2, 2.3.8, 2.3.9, 2.3.9 Patch 1, 2.4, 2.4.0 Patch1, 2.4.0patch1, 2.4.1, 2.4.1 Patch 4, 2.4.1 Patch 5, 2.5, 2.6.0 Patch 2, 2.6.0patch2

Тип программного обеспечения: Content Management System

Опубликовано	Base	Temp	Уязвимости	0day	Сегодня	Э�	Rem	CTI	CVE
10.02.2022	3.5	3.4	Exponent CMS HTTP Header межсайтовый скриптинг	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-23049
10.02.2022	3.5	3.5	Exponent CMS configure_site межсайтовый скриптинг	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-23047
10.02.2022	6.3	6.3	Exponent CMS ZIP File {rce}.php эскалация привилегий	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-23048
31.12.2020	5.5	5.5	Exponent CMS purchaseOrderController.php эскалация привилегий	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-9025
31.12.2020	5.5	5.5	Exponent CMS find_help.php эскалация привилегий	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-9023
31.12.2020	5.5	5.5	Exponent CMS usersController.php эскалация привилегий	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-9022
31.12.2020	5.5	5.5	Exponent CMS storeController.php эскалация привилегий	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-9021
24.05.2019	8.5	8.5	Exponent CMS expTagController.php эскалация привилегий	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-8900
24.05.2019	8.5	8.5	Exponent CMS cartController.php sql-инъекция	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2016-8898
23.05.2019	8.5	8.5	Exponent CMS Object expCatController.php эскалация привилегий	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-8899