Hyland Onbase Sårbarheter

Version

18.0.0.0	14
18.0.0.1	14
18.0.0.2	14
18.0.0.3	14
18.0.0.4	14

Åtgärd

Official Fix	2
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	14

Utnyttjbarhet

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	16

Åtkomstvektor

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	14

Autentisering

Not Defined	0
High	0
Low	2
None	14

Användarinteraktion

Not Defined	0
Required	2
None	14

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	2
≤7	2
≤8	4
≤9	6
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	2
≤7	2
≤8	4
≤9	6
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	6
≤7	2
≤8	6
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	2
≤9	2
≤10	8

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Säljare

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Utnyttja 0-dagars

<1k	4
<2k	6
<5k	6
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Utnyttja idag

<1k	12
<2k	4
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (40): 18, 18.0.0.1, 18.0.0.2, 18.0.0.3, 18.0.0.4, 18.0.0.5, 18.0.0.6, 18.0.0.7, 18.0.0.8, 18.0.0.9, 18.0.0.11, 18.0.0.12, 18.0.0.13, 18.0.0.14, 18.0.0.15, 18.0.0.16, 18.0.0.17, 18.0.0.18, 18.0.0.19, 18.0.0.21, 18.0.0.22, 18.0.0.23, 18.0.0.24, 18.0.0.25, 18.0.0.26, 18.0.0.27, 18.0.0.28, 18.0.0.29, 18.0.0.31, 18.0.0.32, 19.8, 19.8.1, 19.8.2, 19.8.3, 19.8.4, 19.8.5, 19.8.6, 19.8.7, 19.8.8, 19.8.9

Programvarutyp: Application Server Software

Publicerad	Base	Temp	Sårbarhet	0day	I dag	Utn	Rem	CTI	CVE
22/06/2022	3.5	3.4	Hyland Onbase Application Server/OnBase Connect informationsgivning	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2022-23342
11/09/2020	8.5	8.5	Hyland OnBase JSON privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25260
11/09/2020	8.5	8.5	Hyland OnBase XML Data privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25259
11/09/2020	8.5	8.5	Hyland OnBase ASP.NET BinaryFormatter.Deserialize privilegier eskalering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25258
11/09/2020	8.5	8.5	Hyland OnBase XML Data XML External Entity	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25257
11/09/2020	8.2	8.2	Hyland OnBase PKI Certificate/Private Key svag autentisering	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25256
11/09/2020	6.4	6.4	Hyland OnBase förnekande av tjänsten	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25255
11/09/2020	8.5	8.5	Hyland OnBase AddWorkViewLinkedServer sql injektion	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25254
11/09/2020	8.5	8.5	Hyland OnBase sql injektion	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	CVE-2020-25253
11/09/2020	7.5	7.5	Hyland OnBase förfalskning på begäran över webbplatsen	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-25252