Known vulnerabilities in Exment

Software: Exment
Software CPE: cpe:2.3:a:kajitori_co.:exment:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Exment Exment is affected by 7 known vulnerabilities: 1 high, 6 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98420 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47793
CWE-79 Low
No
No
5.0.12, 6.1.5 11.10.2024 SB2024101147
#VU98419 - Incorrect Permission Assignment for Critical Resource
CVE-2024-46897
CWE-732 Low
No
No
5.0.12, 6.1.5 11.10.2024 SB2024101147
#VU66759 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-38089
CWE-79 Low
No
No
4.4.3, 5.0.3 25.08.2022 SB2022081808
SB2022082536
#VU66600 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-37333
CWE-89 High
No
No
4.4.3, 5.0.3 18.08.2022 SB2022081808
SB2022082536
#VU66599 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-38080
CWE-79 Low
No
No
4.4.3, 5.0.3 18.08.2022 SB2022081808
SB2022082536
#VU45972 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5620
CWE-79 Low
No
No
3.6.0 24.08.2020 SB2020082403
#VU45971 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5619
CWE-79 Low
No
No
3.6.0 24.08.2020 SB2020082403