Lucene search
+L

33 matches found

Cvelist
Cvelist
•added 2021/06/10 3:17 p.m.•38 views

CVE-2020-24671

Trace Financial CRESTBridge 6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03...

9.1AI score0.00961EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/10 3:17 p.m.•54 views

CVE-2020-24671

Trace Financial CRESTBridge prior to v6.3.0.02 suffers an authenticated SQL injection due to insufficient input validation. The issue allows an attacker with valid credentials to manipulate SQL statements, potentially impacting data confidentiality, integrity, and availability as described in the...

8.8CVSS9AI score0.00961EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/06/10 3:11 p.m.•37 views

CVE-2020-24663

Trace Financial CRESTBridge 6.3.0.02 contains a stored XSS vulnerability, which was fixed in 6.3.0.03...

5.3AI score0.00491EPSS
SaveExploits0References2
CVE
CVE
•added 2021/06/10 3:11 p.m.•55 views

CVE-2020-24663

The CVE-2020-24663 entry applies to Trace Financial CRESTBridge prior to version 6.3.0.03, which contains a stored XSS vulnerability in CRESTBridge

5.4CVSS5.1AI score0.00491EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/10 12:00 a.m.•7 views

CVE-2020-24663: Improper Neutralization of Input During Web Page Generation

Trace Financial CRESTBridge 6.3.0.02 contains a stored XSS vulnerability, which was fixed in 6.3.0.03...

5.4CVSS5.7AI score0.00491EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/10 12:00 a.m.•6 views

CVE-2020-24671: Improper Neutralization of Special Elements used in an SQL Command

Trace Financial CRESTBridge 6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03...

8.8CVSS5.8AI score0.00961EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/10 12:00 a.m.•5 views

CVE-2020-24667: Improper Neutralization of Special Elements used in an SQL Command

Trace Financial CRESTBridge 6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03...

8.8CVSS5.8AI score0.00961EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/10 12:00 a.m.•13 views

Trace Financial CRESTBridge SQL注入漏洞

CRESTBridge is a resilient, feature-rich interface for Trace Financial.Trace Financial CRESTBridge is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands...

8.8CVSS5.9AI score0.00961EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/10 12:00 a.m.•2 views

PT-2021-11063

Name of the Vulnerable Software and Affected Versions: Trace Financial CRESTBridge versions prior to 6.3.0.03 Description: The issue is an authenticated SQL injection vulnerability. This means that an attacker who has valid credentials can potentially inject malicious SQL code into the system,...

8.8CVSS0.00961EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/06/10 12:00 a.m.•16 views

Trace Financial CRESTBridge SQL注入漏洞

CRESTBridge is a resilient, feature-rich interface for Trace Financial.A SQL injection vulnerability exists in Trace Financial CRESTBridge versions prior to 6.3.0.02, which stems from a lack of validation of external input SQL statements, which can be exploited by attackers to execute illegal SQL...

8.8CVSS6AI score0.00961EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/10 12:00 a.m.•24 views

Trace Financial CRESTBridge 跨站脚本漏洞

CRESTBridge is a resilient, feature-rich interface for Trace Financial.A cross-site scripting vulnerability exists in Trace Financial CRESTBridge, which can be exploited by attackers to execute client-side code...

5.4CVSS5.3AI score0.00491EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/06/10 12:00 a.m.•3 views

PT-2021-11055

Name of the Vulnerable Software and Affected Versions: Trace Financial CRESTBridge versions prior to 6.3.0.03 Description: The issue concerns a stored XSS vulnerability. This vulnerability was fixed in version 6.3.0.03. Recommendations: For versions prior to 6.3.0.03, update to version 6.3.0.03 o...

5.4CVSS0.00491EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/06/10 12:00 a.m.•3 views

PT-2021-11059

Name of the Vulnerable Software and Affected Versions: Trace Financial CRESTBridge versions prior to 6.3.0.03 Description: The issue concerns an authenticated SQL injection vulnerability. This means that an attacker who has valid credentials can potentially inject malicious SQL code to manipulate...

8.8CVSS0.00961EPSS
SaveExploits0References4
Rows per page
Query Builder