Prise
Prise Adas: vulnerabilidades y CVE
Prise Adas tiene 11 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE11
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-15089 | Alta (8.8) | 0.57% | — | 20 sept 2019 | An issue was discovered in PRiSE adAS 1.7.0. Forms have no CSRF protection, letting an attacker execute actions as the administrator. |
| CVE-2019-15088 | Crítica (9.8) | 1.7% | — | 20 sept 2019 | An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication. |
| CVE-2019-15087 | Alta (7.2) | 3.3% | — | 20 sept 2019 | An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution. |
| CVE-2019-15086 | Media (6.1) | 0.80% | — | 20 sept 2019 | An issue was discovered in PRiSE adAS 1.7.0. The newentityID parameter is not properly escaped, leading to a reflected XSS in the error message. |
| CVE-2019-15085 | Alta (7.5) | 1.4% | — | 20 sept 2019 | An issue was discovered in PRiSE adAS 1.7.0. The current database password is embedded in the change password form. |
| CVE-2019-14916 | Media (6.5) | 1.0% | — | 20 sept 2019 | An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload. |
| CVE-2019-14915 | Media (6.1) | 0.52% | — | 20 sept 2019 | An issue was discovered in PRiSE adAS 1.7.0. Certificate data are not properly escaped. This leads to XSS when submitting a rogue certificate. |
| CVE-2019-14914 | Crítica (9.1) | 2.0% | — | 20 sept 2019 | An issue was discovered in PRiSE adAS 1.7.0. The path is not properly escaped in the medatadata_del method, leading to an arbitrary file read and deletion via Directory Traversal. |
| CVE-2019-14913 | Media (5.4) | 0.86% | — | 20 sept 2019 | An issue was discovered in PRiSE adAS 1.7.0. Log data are not properly escaped, leading to persistent XSS in the administration panel. |
| CVE-2019-14912 | Media (6.1) | 1.2% | — | 20 sept 2019 | An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly check the goto parameter, leading to an open redirect that leaks the session cookie. |
| CVE-2019-14911 | Media (6.1) | 1.0% | — | 20 sept 2019 | An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly escape output on error, leading to reflected XSS. |