Registered Envelope Service
Vendor:
First CVE: Apr 7, 2017 · Active for 9 years
7
Total CVEs
More Total CVEs than 85% of tracked products
2.3
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
6.1
Avg CVSS
Higher Avg CVSS than 25% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Registered Envelope Service over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 7, 2017
9 years ago
Most Recent CVE
Apr 18, 2019
2,658 days ago
CVE Severity & Scoring
Registered Envelope Service7 CVEs
86%
14%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (14.3%)
Unknown0 (0.0%)
Required6 (85.7%)
Privileges Required
Low2 (28.6%)
High0 (0.0%)
None5 (71.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-15448HIGH A vulnerability in the user management functions of Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to discover sensitive user information. The at | Nov 8, 2018 | 7.5 | 25 | NO | NO |
CVE-2018-0367MEDIUM A vulnerability in the web-based management interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) | Aug 15, 2018 | 5.4 | 20 | NO | NO |
CVE-2019-1777MEDIUM A vulnerability in the web-based interface of the Cisco Registered Envelope Service could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack aga | Apr 18, 2019 | 5.4 | 19 | NO | NO |
CVE-2017-12323MEDIUM Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-si | Nov 16, 2017 | 6.1 | 19 | NO | NO |
CVE-2017-12321MEDIUM Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-si | Nov 16, 2017 | 6.1 | 19 | NO | NO |
CVE-2017-12320MEDIUM Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticated, remote attacker to conduct a cross-si | Nov 16, 2017 | 6.1 | 17 | NO | NO |
CVE-2017-3889MEDIUM A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a user to a undesired web page, aka an Ope | Apr 7, 2017 | 6.1 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Registered Envelope Service
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.3.4-027 | 1 | 5.4 | 0.9% | 0 | 0 |
| 5.3.4 | 1 | 5.4 | 0.9% | 0 | 0 |
| 5.3.1 | 1 | 5.4 | 0.9% | 0 | 0 |
| 5.3 | 1 | 5.4 | 0.9% | 0 | 0 |
| 5.1.0-015 | 1 | 6.1 | 0.9% | 0 | 0 |
| 5.0 | 1 | 5.4 | 0.9% | 0 | 0 |
| 4.7 | 1 | 5.4 | 0.9% | 0 | 0 |