exploitDog

CVE-2014-5132

Опубликовано: 27 мар. 2018

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses.

Ссылки

http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/533345/100/0/threaded
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/95737
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/128157/ProjectDox-8.1-XSS-User-Enumeration-Ciphertext-Reuse.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/533345/100/0/threaded
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/95737
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:avolvesoftware:projectdox:8.1:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00202

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-qx8v-cqmc-xwqj

CVSS3: 4.3

github

больше 3 лет назад

Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses.

EPSS

Процентиль: 42%

0.00202

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200