2018-07-23

2018-07-24

2018-07-25

All (3) Critical (9) High (20) Medium (3)

CVE-2018-14335 MEDIUM POC THREAT This Month

An issue was discovered in H2 1.4.197. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure H2

NVD GitHub Exploit-DB

CVSS 3.1

6.5

EPSS

13.4%

CVE-2018-11044 MEDIUM This Month

Pivotal Apps Manager included in Pivotal Application Service, versions 2.2.x prior to 2.2.1 and 2.1.x prior to 2.1.8 and 2.0.x prior to 2.0.17 and 1.12.x prior to 1.12.26, does not escape all. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Code Injection Pivotal Application Service

NVD

CVSS 3.0

6.5

EPSS

0.7%

CVE-2018-11059 MEDIUM This Month

RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Archer

NVD

CVSS 3.0

5.4

EPSS

1.4%