Easyvista

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-33231 Oct 20, 11:15 MEDIUM POC This Month

Cross Site Scripting (XSS) vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the notes field. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Service Manager Easyvista

NVD VulDB

CVSS 3.1

5.4

EPSS

0.6%

CVE-2012-1256 Feb 22, 13:54 MEDIUM This Month

The single sign-on (SSO) implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified url_account parameter, in conjunction with a valid login name. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Authentication Bypass Easyvista

NVD

CVSS 2.0

5.0

EPSS

0.2%

CVE-2021-33231

EPSS 1% CVSS 5.4

MEDIUM POC This Month

XSS RCE Service Manager +1

NVD VulDB

CVE-2012-1256

EPSS 0% CVSS 5.0

MEDIUM This Month

PHP Authentication Bypass Easyvista

NVD