2018-07-23

2018-07-24

2018-07-25

All (3) Critical (9) High (20) Medium (3)

CVE-2018-14335 Jul 24, 13:29 MEDIUM POC THREAT This Month

An issue was discovered in H2 1.4.197. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure H2 H2Database

NVD GitHub Exploit-DB

CVSS 3.1

6.5

EPSS

13.4%

CVE-2018-11044 Jul 24, 19:29 MEDIUM This Month

Pivotal Apps Manager included in Pivotal Application Service, versions 2.2.x prior to 2.2.1 and 2.1.x prior to 2.1.8 and 2.0.x prior to 2.0.17 and 1.12.x prior to 1.12.26, does not escape all. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Code Injection Pivotal Application Service Pivotal Software

NVD

CVSS 3.0

6.5

EPSS

0.7%

CVE-2018-11059 Jul 24, 19:29 MEDIUM This Month

RSA Archer, versions prior to 6.4.0.1, contain a stored cross-site scripting vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Rsa Archer

NVD

CVSS 3.0

5.4

EPSS

1.4%