Overview 35 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 4 public PoC · 0 EPSS ≥ 0.5
35matches
1in Waratek scope2.9%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
4public PoC11.4%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
1
2.9%
Outside Waratek scope
0
0.0%
Not applicable
34
97.1%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
35
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
4
11.4%
Proof of concept only
1
2.9%
Forecast only
0
0.0%
No public exploit
30
85.7%
split by
peak 7 / year
20101
Not applicable1
Medium1
not blocked1
Working exploit published1
20115
Not applicable5
Medium5
not blocked5
No public exploit5
20122
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
20131
Not applicable1
Medium1
not blocked1
No public exploit1
20143
Not applicable3
Medium3
not blocked3
Working exploit published2
No public exploit1
20151
Not applicable1
Medium1
not blocked1
No public exploit1
20162
Not applicable2
Medium2
not blocked2
No public exploit2
20177
Not applicable7
Medium7
not blocked7
No public exploit7
20185
Not applicable5
Medium5
not blocked5
No public exploit5
20193
No exploit published1
Not applicable2
Medium3
not blocked3
No public exploit3
20202
Not applicable2
Medium2
not blocked2
No public exploit2
20210
20220
20231
Not applicable1
Medium1
not blocked1
No public exploit1
20242
Not applicable2
Medium2
not blocked2
Proof of concept only1
No public exploit1
20102012201420162018202020222024
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-41614 | Medium | 2024-08-13 | Not applicable | No public exploit | symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles. |
| CVE-2024-41613 | Medium | 2024-08-13 | Not applicable | Proof of concept only | A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note. |
| CVE-2023-24975 | Medium | 2023-03-10 | Not applicable | No public exploit | IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 247030. |
| CVE-2020-25343 | Medium | 2020-10-07 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php |
| CVE-2020-15071 | Medium | 2020-08-11 | Not applicable | No public exploit | content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to appendSubheading. |
| CVE-2019-17488 | Medium | 2019-10-10 | Not applicable | No public exploit | b3log Symphony (aka Sym) before 3.6.0 has XSS via the HTTP User-Agent header. |
| CVE-2018-16249 | Medium | 2019-06-20 | Not applicable | No public exploit | In Symphony before 3.3.0, there is XSS in the Title under Post. The ID "articleTitle" of this is stored in the "articleTitle" JSON field, and executes a payload when accessing the /member/test/points URI, allowing remote attacks. Any Web script or HTML can be inserted by an admin-authenticated user via a crafted web site name. |
| CVE-2019-9142 | Medium | 2019-02-25 | No exploit published | No public exploit | An issue was discovered in b3log Symphony (aka Sym) before v3.4.7. XSS exists via the userIntro and userNickname fields to processor/SettingsProcessor.java. |
| CVE-2018-1708 | Medium | 2018-10-11 | Not applicable | No public exploit | IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force ID: 146343. |
| CVE-2018-1706 | Medium | 2018-10-11 | Not applicable | No public exploit | IBM Spectrum Symphony 7.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 146341. |
| CVE-2018-1704 | Medium | 2018-09-28 | Not applicable | No public exploit | IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 146339. |
| CVE-2018-1705 | Medium | 2018-08-28 | Not applicable | No public exploit | IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 contain an information disclosure vulnerability that could allow an authenticated attacker to obtain highly sensitive information. IBM X-Force ID: 146340. |
| CVE-2018-12043 | Medium | 2018-06-07 | Not applicable | No public exploit | content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page. |
| CVE-2017-16956 | Medium | 2017-11-27 | Not applicable | No public exploit | b3log Symphony (aka Sym) 2.2.0 allows an XSS attack by sending a private letter with a certain /article URI, and a second private letter with a modified title. |
| CVE-2017-16881 | Medium | 2017-11-18 | Not applicable | No public exploit | b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/avatar, related to processor/AdminProcessor.java, processor/ArticleProcessor.java, processor/UserProcessor.java, service/ArticleQueryService.java, service/AvatarQueryService.java, and service/CommentQueryService.java. |
| CVE-2017-16821 | Medium | 2017-11-15 | Not applicable | No public exploit | b3log Symphony (aka Sym) 2.2.0 has XSS in processor/AdminProcessor.java in the admin console, as demonstrated by a crafted X-Forwarded-For HTTP header that is mishandled during display of a client IP address in /admin/user/userid. |
| CVE-2017-8876 | Medium | 2017-05-10 | Not applicable | No public exploit | Symphony 2 2.6.11 has XSS in the meta[navigation_group] parameter to content/content.blueprintssections.php. |
| CVE-2017-6067 | Medium | 2017-03-27 | Not applicable | No public exploit | Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field. |
| CVE-2017-5542 | Medium | 2017-01-20 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to inject arbitrary web script or HTML via the existing-folder parameter. |
| CVE-2017-5541 | Medium | 2017-01-20 | Not applicable | No public exploit | Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. (dot dot) in the existing-folder and new-folder parameters. |
| CVE-2015-8766 | Medium | 2016-01-08 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) email_sendmail[from_name], (2) email_sendmail[from_address], (3) email_smtp[from_name], (4) email_smtp[from_address], (5) email_smtp[host], (6) email_smtp[port], (7) jit_image_manipulation[trusted_external_sites], or (8) maintenance_mode[ip_whitelist] parameters to system/preferences. |
| CVE-2015-8376 | Medium | 2016-01-08 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Navigation Group, or (3) Label parameter to blueprints/sections/edit/1. |
| CVE-2015-4661 | Medium | 2015-06-18 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the sort parameter to system/authors. |
| CVE-2013-7346 | Medium | 2014-03-27 | Not applicable | Working exploit published | Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the sort parameter to system/authors/, related to CVE-2013-2559. |
| CVE-2013-2559 | Medium | 2014-03-27 | Not applicable | Working exploit published | SQL injection vulnerability in Symphony CMS before 2.3.2 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter to system/authors/. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands. |
| CVE-2013-6305 | Medium | 2014-01-21 | Not applicable | No public exploit | IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key. |
| CVE-2013-5387 | Medium | 2013-11-06 | Not applicable | No public exploit | Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service (process crash or hang) via a malformed SOAP request with a large amount of request data. |
| CVE-2010-5204 | Medium | 2012-09-06 | Not applicable | No public exploit | Multiple untrusted search path vulnerabilities in IBM Lotus Symphony 1.3.0 20090908.0900 allow local users to gain privileges via a Trojan horse (1) eclipse_1114.dll or (2) emser645mi.dll file in the current working directory, as demonstrated by a directory that contains a .odm, .odt, .otp, .stc, .stw, .sxg, or .sxw file. NOTE: some of these details are obtained from third party information. |
| CVE-2011-4341 | Medium | 2012-02-12 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author permissions to execute arbitrary SQL commands via the filter parameter to (1) symphony/publish/comments or (2) symphony/publish/images. NOTE: this issue can be leveraged to perform cross-site scripting (XSS) attacks via error messages. NOTE: some of these details are obtained from third party information. |
| CVE-2011-2893 | Medium | 2011-07-27 | Not applicable | No public exploit | The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .xls spreadsheet with an invalid Value reference. |
| CVE-2011-2888 | Medium | 2011-07-27 | Not applicable | No public exploit | IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation. |
| CVE-2011-2887 | Medium | 2011-07-27 | Not applicable | No public exploit | IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a certain sample document. |
| CVE-2011-2886 | Medium | 2011-07-27 | Not applicable | No public exploit | IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx document with empty bullet styles for parent bullets. |
| CVE-2011-2885 | Medium | 2011-07-27 | Not applicable | No public exploit | IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample .doc document that incorporates a user-defined toolbar. |
| CVE-2010-3457 | Medium | 2010-09-17 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) fields[website] parameter in the post comments feature in articles/a-primer-to-symphony-2s-default-theme/ or (2) send-email[recipient] parameter to about/. NOTE: some of these details are obtained from third party information. |