Ember Js

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-1866 Ruby MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

XSS Ember Js

NVD

CVSS 3.0

6.1

EPSS

0.3%

CVE-2015-7565 Ruby MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Ember Js

NVD

CVSS 3.0

6.1

EPSS

0.2%

CVE-2014-0046 Ruby LOW PATCH Monitor

Cross-site scripting (XSS) vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before 1.4.0-beta.6, when used in non-block form, allows remote attackers. Rated low severity (CVSS 2.6), this vulnerability is remotely exploitable.

XSS Ember Js

NVD

CVSS 2.0

2.6

EPSS

0.4%

CVE-2015-1866 Ruby

EPSS 0% CVSS 6.1

MEDIUM POC PATCH This Month

XSS Ember Js

NVD

CVE-2015-7565 Ruby

EPSS 0% CVSS 6.1

MEDIUM PATCH This Month

XSS Ember Js

NVD

CVE-2014-0046 Ruby

EPSS 0% CVSS 2.6

LOW PATCH Monitor

XSS Ember Js

NVD