Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 22

Export CSV
CVE-2021-45789

An arbitrary file read vulnerability was found in Metersphere v1.15.4, where authenticated users can read any file on the server via the file download function.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Metersphere
Products
Metersphere
CVE-2021-45788

Time-based SQL Injection vulnerabilities were found in Metersphere v1.15.4 via the "orders" parameter.

CVSS 3.1 · 8.8 High EPSS 3.1% KEV · Not listed
Vendors
Metersphere
Products
Metersphere