Vulnerabilities (CVE)

Filtered by vendor Zurmo Subscribe
Filtered by product Zurmo
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-14472 1 Zurmo 1 Zurmo 2024-02-04 4.3 MEDIUM 6.1 MEDIUM
Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO.
CVE-2018-19596 1 Zurmo 1 Zurmo 2024-02-04 3.5 LOW 4.8 MEDIUM
Zurmo 3.2.4 allows HTML Injection via an admin's use of HTML in the report section, a related issue to CVE-2018-19506.
CVE-2018-19506 1 Zurmo 1 Zurmo 2024-02-04 3.5 LOW 4.8 MEDIUM
Zurmo 3.2.4 has XSS via an admin's use of the name parameter in the reports section, aka the app/index.php/reports/default/details?id=1 URI.