Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
YetiforceYetiforce Customer Relationship Management

18 matches found

CVE
CVE•added 2022/08/21 8:15 a.m.•83 views

CVE-2022-2885

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

6.7CVSS5.1AI score0.0005EPSS
CVE
CVE•added 2022/05/05 11:15 a.m.•74 views

CVE-2022-1411

Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Attacker can send malicious files to the victims is able to retrieve the stored data from the web application without that data being made safe to render in the browser and steals victim's cookie leads to ac...

9.1CVSS6.5AI score0.0029EPSS
CVE
CVE•added 2024/02/16 8:15 a.m.•71 views

CVE-2023-49508

Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component.

6.5CVSS5.9AI score0.00147EPSS
CVE
CVE•added 2022/09/20 7:15 a.m.•70 views

CVE-2022-3000

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

6.3CVSS5.4AI score0.00075EPSS
CVE
CVE•added 2022/08/22 12:15 p.m.•67 views

CVE-2022-1340

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

7CVSS5.5AI score0.00095EPSS
CVE
CVE•added 2022/10/06 6:16 p.m.•66 views

CVE-2022-3002

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

5.4CVSS5.2AI score0.0098EPSS
CVE
CVE•added 2022/09/20 6:15 a.m.•65 views

CVE-2022-2924

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3.

7.1CVSS5.5AI score0.00964EPSS
CVE
CVE•added 2022/01/24 12:15 p.m.•63 views

CVE-2022-0269

Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0.

8CVSS7.8AI score0.00138EPSS
CVE
CVE•added 2021/12/16 8:15 a.m.•58 views

CVE-2021-4121

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

6.4CVSS6.2AI score0.00206EPSS
CVE
CVE•added 2022/09/20 10:15 a.m.•58 views

CVE-2022-3004

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

6.3CVSS5.4AI score0.00082EPSS
CVE
CVE•added 2021/12/11 2:15 p.m.•57 views

CVE-2021-4092

yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF)

4.3CVSS4.5AI score0.00098EPSS
CVE
CVE•added 2021/12/15 2:15 p.m.•56 views

CVE-2021-4116

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

6.6CVSS5.5AI score0.00147EPSS
CVE
CVE•added 2021/12/15 3:15 p.m.•56 views

CVE-2021-4117

yetiforcecrm is vulnerable to Business Logic Errors

7.7CVSS4.8AI score0.00186EPSS
CVE
CVE•added 2022/08/22 2:15 p.m.•56 views

CVE-2022-2890

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

9CVSS5.6AI score0.00131EPSS
CVE
CVE•added 2022/09/20 11:15 a.m.•56 views

CVE-2022-3005

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

5.4CVSS5.2AI score0.00111EPSS
CVE
CVE•added 2021/12/14 3:15 p.m.•53 views

CVE-2021-4107

yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

6.1CVSS5.7AI score0.00328EPSS
CVE
CVE•added 2021/12/15 9:15 a.m.•51 views

CVE-2021-4111

yetiforcecrm is vulnerable to Business Logic Errors

7.3CVSS4.8AI score0.00177EPSS
CVE
CVE•added 2022/08/23 4:15 a.m.•48 views

CVE-2022-2829

Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0.

8.8CVSS5.7AI score0.0012EPSS