Invision Power Services Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Forum Software	58
Photo Gallery Software	12
Not Defined	12
Blog Software	6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Invision Power Services IP.Board	56
Invision Power Services Invision Gallery	10
Invision Power Services IPS	6
Invision Power Services Invision Community Blog	6
Invision Power Services Community Suite	4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Remediation

Official Fix	44
Temporary Fix	0
Workaround	0
Unavailable	8
Not Defined	36

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploitability

High	10
Functional	2
Proof-of-Concept	36
Unproven	4
Not Defined	36

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Access Vector

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	88

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Authentication

Not Defined	0
High	0
Low	8
None	80

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

User Interaction

Not Defined	0
Required	38
None	50

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

C3BM Index

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	6
≤5	22
≤6	14
≤7	16
≤8	30
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	6
≤5	26
≤6	18
≤7	28
≤8	10
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

VulDB

≤1	0
≤2	0
≤3	0
≤4	6
≤5	28
≤6	12
≤7	12
≤8	30
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	2
≤8	0
≤9	2
≤10	2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit 0-day

<1k	12
<2k	36
<5k	40
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Today

<1k	88
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Market Volume

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

🔴 CTI Activities

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Affected Products (9): Community Suite (6), IP.Board (56), IP.Gallery (1), IPS (3), Invision Board (4), Invision Community Blog (5), Invision Gallery (10), Invision Power Board (1), Invision Power Top Site List (1)

Link to Vendor Website: https://invisioncommunity.com/

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
08/18/2021	3.5	3.4	Invision Power Services Community Suite IFRAME cross site scripting	Unknown	Not Defined	Official Fix	0.00057	0.00	CVE-2021-39250
08/18/2021	3.5	3.4	Invision Power Services Community Suite Filename mt_rand cross site scripting	Unknown	Not Defined	Official Fix	0.00112	0.00	CVE-2021-39249
06/02/2021	5.5	5.3	Invision Power Services Community Suite runProcessFunction code injection	Unknown	Not Defined	Official Fix	0.00745	0.00	CVE-2021-32924
01/08/2021	7.5	7.2	Invision Power Services Community Suite Download REST API files.php GETindex sql injection	Unknown	Not Defined	Official Fix	0.00063	0.00	CVE-2021-3025
01/06/2021	3.5	3.5	Invision Power Services Community Suite Comments cross site scripting	Unknown	Not Defined	Official Fix	0.00078	0.00	CVE-2021-3026
05/11/2017	6.2	6.2	Invision Power Services IPS SVG Document Stored access control	Unknown	Not Defined	Not Defined	0.00226	0.00	CVE-2017-8899
05/11/2017	7.0	7.0	Invision Power Services IPS Announcement index.php Stored access control	Unknown	Not Defined	Not Defined	0.00230	0.01	CVE-2017-8898
05/11/2017	5.2	5.2	Invision Power Services IPS UTF8 Converter index.php Reflected cross site scripting	Unknown	Not Defined	Not Defined	0.00147	0.07	CVE-2017-8897
04/23/2017	5.7	5.5	Invision Power Services Community Suite Session Cookie uniqid entropy	Unknown	Not Defined	Official Fix	0.00179	0.01	CVE-2016-2564
09/04/2015	5.3	5.1	Invision Power Services IP.Board URL resource management	Forum Software	Not Defined	Official Fix	0.00178	0.02	CVE-2015-6812

77 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 77 results.

◂ PreviousOverviewNext ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!