Yetiforce
Yetiforce Customer Relationship Management: vulnerabilidades y CVE
Yetiforce Customer Relationship Management tiene 18 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE18
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-49508 | Media (6.5) | 1.0% | — | 16 feb 2024 | Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php… |
| CVE-2022-3002 | Media (5.4) | 0.70% | — | 6 oct 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-3005 | Media (5.4) | 0.63% | — | 20 sept 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-3004 | Media (5.4) | 0.63% | — | 20 sept 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-3000 | Media (5.4) | 0.63% | — | 20 sept 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-2924 | Media (5.4) | 0.78% | — | 20 sept 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3. |
| CVE-2022-2829 | Media (5.4) | 0.83% | — | 23 ago 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-2890 | Media (5.4) | 0.87% | — | 22 ago 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-1340 | Media (5.4) | 0.49% | — | 22 ago 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-2885 | Media (4.8) | 0.47% | — | 21 ago 2022 | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. |
| CVE-2022-1411 | Media (6.1) | 0.76% | — | 5 may 2022 | Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Attacker can send malicious files to the victims is able to retrieve the stored data from the web application without that data… |
| CVE-2022-0269 | Alta (8) | 0.53% | — | 24 ene 2022 | Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0. |
| CVE-2021-4121 | Media (6.1) | 0.76% | — | 16 dic 2021 | yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-4117 | Media (4.3) | 0.71% | — | 15 dic 2021 | yetiforcecrm is vulnerable to Business Logic Errors |
| CVE-2021-4116 | Media (5.4) | 0.46% | — | 15 dic 2021 | yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-4111 | Media (4.3) | 0.62% | — | 15 dic 2021 | yetiforcecrm is vulnerable to Business Logic Errors |
| CVE-2021-4107 | Media (6.1) | 0.78% | — | 14 dic 2021 | yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-4092 | Media (4.3) | 0.40% | — | 11 dic 2021 | yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF) |