Crealogix EBICS 7.0 /ebics-server/ebics.aspx କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ
Dogoggorri kan akka ସମସ୍ୟାଜନକ jedhamuun ramadame Crealogix EBICS 7.0 keessatti argameera. Miidhamni argame is hojii hin beekamne faayilii /ebics-server/ebics.aspx keessa. Wanti jijjiirame gara କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ geessa. Rakkoo ibsuuf CWE yoo fayyadamte gara CWE-79 si geessa. Odeeffannoon kun yeroo 10/10/2022 maxxanfameera. Odeeffannoon kun buufachuuf pentagrid.ch irratti argama. Dogoggorri kun CVE-2022-3442 jedhamee waamama. Weerara fageenya irraa jalqabuu ni danda'ama. Ibsa teeknikaa ni jira. Waan dabalataa ta’een, meeshaa balaa kana fayyadamuuf ni jira. Qorannoo miidhaa (exploit) uummataaf ifa taasifameera, kanaafis fayyadamuu ni danda'ama. Ammas, gatii exploit might be approx. USD $0-$5k yeroo ammaa irratti argamuu danda'a. ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ ta’uu isaa ibsameera. Exploit pentagrid.ch irraa buufachuun ni danda'ama. Akka 0-daytti, gatiin isaa daldala dhoksaa keessatti $0-$5k akka ta'e tilmaamameera. Qabiyyee miidhamte haaromsuuf gorsa ni kennama. If you want to get best quality of vulnerability data, you may have to visit VulDB.
2 ଆଡାପ୍ଟେସନ୍ · 64 ପଏଣ୍ଟ
| ଫିଲ୍ଡ | ସୃଷ୍ଟି ହୋଇଛି 10/10/2022 03:42 PM | ଅଦ୍ୟତନ 1/1 10/31/2022 02:25 PM |
|---|---|---|
| software_vendor | Crealogix | Crealogix |
| software_name | EBICS | EBICS |
| software_version | 7.0 | 7.0 |
| software_file | /ebics-server/ebics.aspx | /ebics-server/ebics.aspx |
| vulnerability_cwe | CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ) | CWE-79 (କ୍ରସ୍ ସାଇଟ୍ ସ୍କ୍ରିପ୍ଟିଂ) |
| vulnerability_risk | 1 | 1 |
| cvss3_vuldb_av | N | N |
| cvss3_vuldb_ac | L | L |
| cvss3_vuldb_ui | R | R |
| cvss3_vuldb_s | U | U |
| cvss3_vuldb_c | N | N |
| cvss3_vuldb_i | L | L |
| cvss3_vuldb_a | N | N |
| cvss3_vuldb_e | P | P |
| cvss3_vuldb_rl | O | O |
| cvss3_vuldb_rc | C | C |
| advisory_url | https://www.pentagrid.ch/en/blog/reflected-xss-vulnerability-in-crealogix-ebics-implementation/ | https://www.pentagrid.ch/en/blog/reflected-xss-vulnerability-in-crealogix-ebics-implementation/ |
| exploit_availability | 1 | 1 |
| exploit_publicity | 1 | 1 |
| exploit_url | https://www.pentagrid.ch/en/blog/reflected-xss-vulnerability-in-crealogix-ebics-implementation/ | https://www.pentagrid.ch/en/blog/reflected-xss-vulnerability-in-crealogix-ebics-implementation/ |
| countermeasure_name | ଅପଗ୍ରେଡ୍ କରନ୍ତୁ | ଅପଗ୍ରେଡ୍ କରନ୍ତୁ |
| countermeasure_date | 1664316000 (09/28/2022) | 1664316000 (09/28/2022) |
| upgrade_version | 7.1 | 7.1 |
| source_cve | CVE-2022-3442 | CVE-2022-3442 |
| cna_responsible | VulDB | VulDB |
| advisory_date | 1665352800 (10/10/2022) | 1665352800 (10/10/2022) |
| cvss2_vuldb_av | N | N |
| cvss2_vuldb_ac | L | L |
| cvss2_vuldb_ci | N | N |
| cvss2_vuldb_ii | P | P |
| cvss2_vuldb_ai | N | N |
| cvss2_vuldb_e | POC | POC |
| cvss2_vuldb_rc | C | C |
| cvss2_vuldb_rl | OF | OF |
| cvss2_vuldb_au | S | S |
| cvss3_vuldb_pr | L | L |
| cvss2_vuldb_basescore | 4.0 | 4.0 |
| cvss2_vuldb_tempscore | 3.1 | 3.1 |
| cvss3_vuldb_basescore | 3.5 | 3.5 |
| cvss3_vuldb_tempscore | 3.2 | 3.2 |
| cvss3_meta_basescore | 3.5 | 4.4 |
| cvss3_meta_tempscore | 3.2 | 4.3 |
| price_0day | $0-$5k | $0-$5k |
| cvss3_nvd_av | N | |
| cvss3_nvd_ac | L | |
| cvss3_nvd_pr | N | |
| cvss3_nvd_ui | R | |
| cvss3_nvd_s | C | |
| cvss3_nvd_c | L | |
| cvss3_nvd_i | L | |
| cvss3_nvd_a | N | |
| cvss3_cna_av | N | |
| cvss3_cna_ac | L | |
| cvss3_cna_pr | L | |
| cvss3_cna_ui | R | |
| cvss3_cna_s | U | |
| cvss3_cna_c | N | |
| cvss3_cna_i | L | |
| cvss3_cna_a | N | |
| cve_cna | VulDB | |
| cvss3_nvd_basescore | 6.1 | |
| cvss3_cna_basescore | 3.5 |