Known vulnerabilities in Bolt

Vendor: Bolt.cm
Software: Bolt
Software CPE: cpe:2.3:a:bolt.cm:bolt:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bolt Bolt is affected by 9 known vulnerabilities: 2 high, 7 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29011 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-4041
CWE-79 Low
No
No
3.7.1 15.06.2020 SB2020061504
#VU29010 - Cross-Site Request Forgery (CSRF)
CVE-2020-4040
CWE-352 Low
Available
No
3.7.1 15.06.2020 SB2020061504
#VU34921 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-9553
CWE-79 Low
Available
No
- 31.12.2019 SB2019123135
#VU34933 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-20058
CWE-79 Low
No
No
- 29.12.2019 SB2019122904
#VU20424 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15485
CWE-79 Low
No
No
3.6.10 28.08.2019 SB2019082315
#VU30808 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15483
CWE-79 Low
No
No
3.6.10 23.08.2019 SB2019082319
#VU30809 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15484
CWE-79 Low
No
No
3.6.10 23.08.2019 SB2019082319
#VU36025 - Cross-Site Request Forgery (CSRF)
CVE-2019-10874
CWE-352 High
No
No
- 05.04.2019 SB2019040518
#VU31149 - Unrestricted Upload of File with Dangerous Type
CVE-2019-9185
CWE-434 High
No
No
3.6.5 08.03.2019 SB2019030816