Eframework
Vendor:
First CVE: Jul 24, 2020 · Active for 5 years
7
Total CVEs
More Total CVEs than 83% of tracked products
7.0
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
8.0
Avg CVSS
Higher Avg CVSS than 69% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Eframework over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 24, 2020
5 years ago
Most Recent CVE
Jul 24, 2020
2,191 days ago
CVE Severity & Scoring
Eframework7 CVEs
29%
29%
43%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None5 (71.4%)
Unknown0 (0.0%)
Required2 (28.6%)
Privileges Required
Low1 (14.3%)
High0 (0.0%)
None6 (85.7%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2020-15920CRITICAL There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. No authentic | Jul 24, 2020 | 9.8 | 94 | NO | YES |
CVE-2020-15922CRITICAL There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is re | Jul 24, 2020 | 9.8 | 73 | NO | YES |
CVE-2020-15921CRITICAL Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execution. | Jul 24, 2020 | 9.8 | 43 | NO | YES |
CVE-2020-15923HIGH Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal. | Jul 24, 2020 | 7.5 | 25 | NO | NO |
CVE-2020-15919MEDIUM A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0. | Jul 24, 2020 | 6.1 | 22 | NO | NO |
CVE-2020-15924HIGH There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authenticat | Jul 24, 2020 | 7.5 | 20 | NO | NO |
CVE-2020-15918MEDIUM Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0. | Jul 24, 2020 | 5.4 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
14.3% of CVEs· 97th percentile
Nuclei
1 CVE
14.3% of CVEs· 97th percentile
ExploitDB
3 CVEs
42.9% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Eframework
Top CWEs
Versions
No cataloged versions.