Elemental Software

First CVE: May 2, 2005Active for: 21 yearsTotal CVEs: 5

Elemental Software maintains a narrowly focused product line centered on CartWiz, an e-commerce platform. The limited disclosure history reflects the vendor's niche positioning in web-based commerce applications, where observed vulnerabilities map to general input and validation concerns; live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated

5

Total CVEs

More Total CVEs than 83% of tracked vendors

5.0

Avg CVEs / Product / Year

More Avg CVEs / Product / Year than 97% of tracked vendors

4.9

Avg CVSS Score

Higher Avg CVSS Score than 10% of tracked vendors

0.0%

In CISA KEV

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Elemental Software over time

Volume of CVEsAvg CVSS Base Score

First CVE

May 2, 2005

21 years ago

Most Recent CVE

Aug 3, 2005

7,660 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (5 CVEs).

5 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2005-2386MEDIUM Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ 1.20 allows remote attackers to inject arbitrary web script or HTML via the message parameter.	Jul 27, 2005	4.3	21	NO	YES
CVE-2005-2206HIGH Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to view	Jul 11, 2005	7.5	19	NO	NO
CVE-2005-2207MEDIUM Cross-site scripting (XSS) vulnerability in store/login.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter.	Jul 11, 2005	4.3	15	NO	NO
CVE-2005-2427MEDIUM Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter.	Aug 3, 2005	4.3	14	NO	NO
CVE-2005-1292MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to (1) tellAFriend	May 2, 2005	4.3	14	NO	NO

View all 5 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products5 CVEs

80%

20%

Severity distribution among all CVEs352,294 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown5 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown5 (100.0%)

User Interaction

None0 (0.0%)

Unknown5 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown5 (100.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (5 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

1 CVE

20.0% of CVEs· 77th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Elemental Software.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Elemental Software — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Elemental Software's Products

View all 1 CNAs →