Known vulnerabilities in Digital Asset Management

Vendor: OpenAsset
Software: Digital Asset Management
Software CPE: cpe:2.3:a:openasset:digital_asset_management:*:*:*:*:*:*:*:*
Website: https://openasset.com/
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Digital Asset Management Digital Asset Management is affected by 8 known vulnerabilities: 3 medium, 5 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49001 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-28859		 CWE-79 Low
No
No
 12.0.22 15.12.2020 SB2020121523
#VU49000 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-28859		 CWE-79 Low
No
No
 12.0.22 15.12.2020 SB2020121523
#VU48995 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-28860		 CWE-89 Medium
No
No
 12.0.23 14.12.2020 SB2020121522
#VU48996 - Improper Access Control
CVE-2020-28861		 CWE-284 Medium
No
No
 12.0.22 14.12.2020 SB2020121523
#VU48997 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-28857		 CWE-79 Low
No
No
 12.0.23 14.12.2020 SB2020121522
#VU48998 - Cross-Site Request Forgery (CSRF)
CVE-2020-28858		 CWE-352 Low
No
No
 12.0.26 14.12.2020 SB2020121524
#VU48999 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-28859		 CWE-79 Low
No
No
 12.0.22 14.12.2020 SB2020121523
#VU49002 - Improper Access Control
CVE-2020-28856		 CWE-284 Medium
No
No
 12.0.20 14.12.2020 SB2020121525