Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2020-25399

Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat.

CVSS 3.1 · 7.8 High EPSS 1.0% KEV · Not listed
Vendors
Mind
Products
Imind Server
CVE-2020-25398

CSV Injection exists in InterMind iMind Server through 3.13.65 via the csv export functionality.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Mind
Products
Imind Server
CVE-2020-24765

InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 request.

CVSS 3.1 · 7.5 High EPSS 6.8% KEV · Not listed
Vendors
Mind
Products
Imind Server