Matera
Matera Banco: vulnerabilidades y CVE
Matera Banco tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 1 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas1
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2018-14929 | Media (6.1) | 0.66% | — | 3 ago 2018 | Matera Banco 1.0.0 is vulnerable to multiple reflected XSS, as demonstrated by the /contingency/web/index.jsp (aka home page) url parameter. |
| CVE-2018-14928 | Alta (7.5) | 1.7% | — | 3 ago 2018 | /contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file parameter. |
| CVE-2018-14927 | Media (5.3) | 1.5% | — | 3 ago 2018 | Matera Banco 1.0.0 is vulnerable to path traversal (allowing access to system files outside the default application folder) via the /contingency/servlet/ServletFileDownload file parameter, related to… |
| CVE-2018-14926 | Alta (8.8) | 0.58% | — | 3 ago 2018 | Matera Banco 1.0.0 allows CSRF, as demonstrated by a /contingency/web/messageSend/messageSendHandler.jsp request. |
| CVE-2018-14925 | Crítica (9.8) | 1.5% | — | 3 ago 2018 | Matera Banco 1.0.0 mishandles Java errors in the backend, as demonstrated by a stack trace revealing use of net.sf.acegisecurity components. |
| CVE-2018-14924 | Media (6.1) | 0.80% | — | 3 ago 2018 | Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" (aka user fullname) field. |