Export limit exceeded: 197027 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (4 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2022-35554 1 Bpcbt 1 Smartvista 2024-11-21 6.1 Medium
Multiple reflected XSS vulnerabilities occur when handling error message of BPC SmartVista version 3.28.0 allowing an attacker to execute javascript code at client side.
CVE-2018-15208 1 Bpcbt 1 Smartvista 2024-11-21 N/A
BPC SmartVista 2 has Session Fixation via the JSESSIONID parameter.
CVE-2018-15207 1 Bpcbt 1 Smartvista 2024-11-21 N/A
BPC SmartVista 2 has Improper Access Control in the SVFE module, where it fails to appropriately restrict access: a normal user is able to access the SVFE2/pages/finadmin/currconvrate/currconvrate.jsf functionality that should be only accessible to an admin.
CVE-2018-15206 1 Bpcbt 1 Smartvista 2024-11-21 N/A
BPC SmartVista 2 has CSRF via SVFE2/pages/admpages/roles/createrole.jsf.