Smartstore

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-32608 CRITICAL POC PATCH THREAT Act Now

An issue was discovered in Smartstore (aka SmartStoreNET) through 4.1.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Smartstore

NVD GitHub

CVSS 3.1

9.8

EPSS

33.4%

CVE-2021-32607 CRITICAL POC PATCH THREAT Act Now

Information Disclosure Smartstore

NVD GitHub

CVSS 3.1

9.8

EPSS

33.4%

CVE-2020-15243 CRITICAL Act Now

Affected versions of Smartstore have a missing WebApi Authentication attribute. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Smartstore

NVD GitHub

CVSS 3.1

9.8

EPSS

1.2%

CVE-2021-32608

EPSS 33% CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

Information Disclosure Smartstore

NVD GitHub

CVE-2021-32607

EPSS 33% CVSS 9.8

CRITICAL POC PATCH THREAT Act Now

Information Disclosure Smartstore

NVD GitHub

CVE-2020-15243

EPSS 1% CVSS 9.8

CRITICAL Act Now

Authentication Bypass Smartstore

NVD GitHub