Quadbase

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-9958 Jun 24, 19:15 HIGH POC This Week

CSRF within the admin panel in Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to escalate privileges, or create new admin accounts by crafting a malicious web page that issues. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF Espressreport Enterprise Server Quadbase

NVD

CVSS 3.0

8.8

EPSS

0.8%

CVE-2019-9957 Jun 24, 19:15 MEDIUM POC This Month

Stored XSS within Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS CSRF Espressreport Es Quadbase

NVD

CVSS 3.0

5.4

EPSS

0.8%

CVE-2019-9958

EPSS 1% CVSS 8.8

HIGH POC This Week

CSRF Espressreport Enterprise Server Quadbase

NVD

CVE-2019-9957

EPSS 1% CVSS 5.4

MEDIUM POC This Month

XSS CSRF Espressreport Es +1

NVD