Ximdex

Vendor:

First CVE: Jun 5, 2018 · Active for 8 years

4
Total CVEs
More Total CVEs than 75% of tracked products
4.0
Avg CVEs / Year
Higher CVE frequency than 85% of tracked products
6.1
Avg CVSS
Higher Avg CVSS than 25% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Ximdex over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 5, 2018
8 years ago
Most Recent CVE
Jun 13, 2018
2,967 days ago

CVE Severity & Scoring

Ximdex4 CVEs
All CVEs353,240 CVEs
Medium
Attack Vector
Local0 (0.0%)
Network4 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required4 (100.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None4 (100.0%)
Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (4 CVEs).

4 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2018-12273MEDIUM
The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.
Jun 13, 20186.120NONO
CVE-2018-12047MEDIUM
xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through 12.
Jun 8, 20186.120NONO
CVE-2018-11735MEDIUM
index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter.
Jun 5, 20186.120NONO
CVE-2018-12272MEDIUM
xowl/request.php in Ximdex 4.0 has XSS via the content parameter.
Jun 13, 20186.119NONO
View all 4 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (4 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (4 CVEs).

Media Mentions

Signals from CVEs in this product scope (4 CVEs).

Top CNAs Publishing CVEs For Ximdex

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
4.046.10.9%00