Known vulnerabilities in PivotX

Known vulnerabilities in PivotX

Vendor: pivotlog.net

Software: PivotX

Software CPE: cpe:2.3:a:pivotlog_net:pivotx:*:*:*:*:*:*:*:*

Website:

Total vulnerabilities: 12

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU8654 - Unrestricted Upload of File with Dangerous Type CVE-2017-14958	CWE-434	Low	No	No	-	02.10.2017	SB2017060101
#VU38895 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-9332	CWE-79	Low	No	No	-	06.06.2017	SB2017060633
#VU6851 - Resource Management Errors CVE-2017-7570	CWE-399	Medium	No	No	-	01.06.2017	SB2017060101
#VU6850 - Unrestricted Upload of File with Dangerous Type CVE-2017-8402	CWE-434	Medium	No	No	-	31.05.2017	SB2017060101
#VU2836 - Improper Access Control CVE-2011-1035	CWE-284	High	No	No	-	26.12.2016	SB2011021601
#VU41814 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2014-0341	CWE-79	Low	No	No	-	15.04.2014	SB2014041504
#VU41815 - Improper input validation CVE-2014-0342	CWE-20	Medium	No	No	-	15.04.2014	SB2014041504
#VU43731 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2012-2274	CWE-79	Low	Available	No	-	14.08.2012	SB2012081405
#VU45371 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2011-0772	CWE-79	Low	Available	No	-	04.02.2011	SB2011020402
#VU45372 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2011-0773	CWE-79	Low	Available	No	-	04.02.2011	SB2011020402
#VU45373 - Exposure of sensitive information to an unauthorized actor CVE-2011-0774	CWE-200	Medium	No	No	-	04.02.2011	SB2011020403
#VU45374 - Exposure of sensitive information to an unauthorized actor CVE-2011-0775	CWE-200	Medium	No	No	-	04.02.2011	SB2011020403