Exponent Cms Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

2.3.9	12
2.4.0	10
2.3.0	8
2.3.1	8
2.3.2	8

Remediation

Official Fix	56
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	14

Exploitability

High	2
Functional	0
Proof-of-Concept	16
Unproven	0
Not Defined	52

Access Vector

Not Defined	0
Physical	0
Local	2
Adjacent	6
Network	62

Authentication

Not Defined	0
High	0
Low	22
None	48

User Interaction

Not Defined	0
Required	14
None	56

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	10
≤5	2
≤6	18
≤7	8
≤8	8
≤9	18
≤10	6

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	12
≤5	0
≤6	24
≤7	4
≤8	6
≤9	20
≤10	4

VulDB

≤1	0
≤2	0
≤3	0
≤4	10
≤5	6
≤6	14
≤7	8
≤8	26
≤9	0
≤10	6

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	6
≤7	4
≤8	8
≤9	0
≤10	22

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	8
<2k	30
<5k	32
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	70
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (49): 0.94, 0.95, 0.96.1, 0.96.3, 0.96.4, 0.96.5 Rc1, 0.96.6 Alpha, 0.97, 0.98, 0.99, 2, 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7, 2.0.8, 2.0.9, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.2, 2.2.1, 2.3, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.6, 2.3.7, 2.3.7 Patch 2, 2.3.8, 2.3.9, 2.3.9 Patch 1, 2.4, 2.4.0 Patch1, 2.4.0patch1, 2.4.1, 2.4.1 Patch 4, 2.4.1 Patch 5, 2.5, 2.6.0 Patch 2, 2.6.0patch2

Software Type: Content Management System

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CTI	CVE
02/10/2022	3.5	3.4	Exponent CMS HTTP Header cross site scripting	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-23049
02/10/2022	3.5	3.5	Exponent CMS configure_site cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-23047
02/10/2022	6.3	6.3	Exponent CMS ZIP File {rce}.php unrestricted upload	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-23048
12/31/2020	5.5	5.5	Exponent CMS purchaseOrderController.php input validation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-9025
12/31/2020	5.5	5.5	Exponent CMS find_help.php input validation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-9023
12/31/2020	5.5	5.5	Exponent CMS usersController.php input validation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-9022
12/31/2020	5.5	5.5	Exponent CMS storeController.php input validation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-9021
05/24/2019	8.5	8.5	Exponent CMS expTagController.php injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2016-8900
05/24/2019	8.5	8.5	Exponent CMS cartController.php sql injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2016-8898
05/23/2019	8.5	8.5	Exponent CMS Object expCatController.php injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2016-8899

59 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 59 results.

more entries by Exponent

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!