Integria Ims
Vendor:
First CVE: Dec 17, 2018 · Active for 7 years
7
Total CVEs
More Total CVEs than 85% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
8.0
Avg CVSS
Higher Avg CVSS than 72% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Integria Ims over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 17, 2018
7 years ago
Most Recent CVE
Oct 7, 2021
1,755 days ago
CVE Severity & Scoring
Integria Ims7 CVEs
43%
14%
43%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low6 (85.7%)
High1 (14.3%)
Unknown0 (0.0%)
User Interaction
None4 (57.1%)
Unknown0 (0.0%)
Required3 (42.9%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None7 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-19829MEDIUM Artica Integria IMS 5.0.83 has CSRF in godmode/usuarios/lista_usuarios, resulting in the ability to delete an arbitrary user when the ID number is known. | Dec 18, 2018 | 6.5 | 32 | NO | YES |
CVE-2021-3832CRITICAL Integria IMS in its 5.0.92 version is vulnerable to a Remote Code Execution attack through file uploading. An unauthenticated attacker could abuse the AsyncUpload() function in ord | Oct 7, 2021 | 9.8 | 31 | NO | NO |
CVE-2019-15091CRITICAL filemgr.php in Artica Integria IMS 5.0.86 allows index.php?sec=wiki&sec2=operation/wiki/wiki&action=upload arbitrary file upload. | Aug 16, 2019 | 9.8 | 31 | NO | NO |
CVE-2018-19828MEDIUM Artica Integria IMS 5.0.83 has XSS via the search_string parameter. | Dec 17, 2018 | 6.1 | 31 | NO | YES |
CVE-2021-3833CRITICAL Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a spe | Oct 7, 2021 | 9.8 | 30 | NO | NO |
CVE-2018-1000812HIGH Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recov | Dec 20, 2018 | 8.1 | 25 | NO | NO |
CVE-2021-3834MEDIUM Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-sit | Oct 7, 2021 | 6.1 | 21 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
2 CVEs
28.6% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Integria Ims
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.0.92 | 3 | 8.6 | 1.3% | 0 | 0 |
| 5.0.86 | 1 | 9.8 | 1.6% | 0 | 0 |
| 5.0.83 | 2 | 6.3 | 2.1% | 0 | 2 |