Known vulnerabilities in openSIS - page 2

Vendor: Open Solutions for Education
Software: openSIS
Software CPE: cpe:2.3:a:OS4Ed:opensis:*:*:*:*:*:*:*:*
Website: https://www.os4ed.com/
Total vulnerabilities: 33
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openSIS openSIS is affected by 33 known vulnerabilities: 11 high, 22 medium Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46212 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-13383		 CWE-22 Medium
Available
No
 - 02.09.2020 SB2020070177
#VU46211 - Improper Access Control
CVE-2020-13382		 CWE-284 High
Available
No
 - 02.09.2020 SB2020070177
#VU46210 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-13381		 CWE-89 High
Available
No
 - 02.09.2020 SB2020070177
#VU46179 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-6144		 CWE-94 High
No
No
 7.4 01.09.2020 SB2020090116
#VU46178 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-6143		 CWE-94 High
No
No
 7.4 01.09.2020 SB2020090116
#VU46177 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6125		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46176 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6136		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46175 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6140		 CWE-89 High
No
No
 7.4 01.09.2020 SB2020090116
#VU46174 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6139		 CWE-89 High
No
No
 7.4 01.09.2020 SB2020090116
#VU46173 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6138		 CWE-89 High
No
No
 7.4 01.09.2020 SB2020090116
#VU46155 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6131		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46154 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6130		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116
#VU46153 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-6129		 CWE-89 Medium
No
No
 7.4 01.09.2020 SB2020090116


Showing elements 21 - 40 out of 33