Security Vulnerabilities - CVEs Published In 2022
The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail.
CVSS Score
5.5
EPSS Score
0.004
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.
CVSS Score
7.2
EPSS Score
0.011
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.
CVSS Score
7.2
EPSS Score
0.012
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.
CVSS Score
7.2
EPSS Score
0.011
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.
CVSS Score
7.2
EPSS Score
0.011
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.
CVSS Score
7.2
EPSS Score
0.011
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.
CVSS Score
7.2
EPSS Score
0.011
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list.
CVSS Score
7.2
EPSS Score
0.011
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/department/list.
CVSS Score
7.2
EPSS Score
0.011
Published
2022-09-09
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /system/menu/list.
CVSS Score
7.2
EPSS Score
0.011
Published
2022-09-09