Known Vulnerabilities for products from Yetiforce
Listed below are 17 of the newest known vulnerabilities associated with the vendor "Yetiforce".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-3005 json | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 5.4 - MEDIUM | 2022-09-20 | 2022-09-21 |
| CVE-2022-3004 json | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 5.4 - MEDIUM | 2022-09-20 | 2022-09-21 |
| CVE-2022-3002 json | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 5.4 - MEDIUM | 2022-10-06 | 2022-11-10 |
| CVE-2022-3000 json | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 5.4 - MEDIUM | 2022-09-20 | 2022-09-21 |
| CVE-2022-2924 json | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.3. | 5.4 - MEDIUM | 2022-09-20 | 2022-09-21 |
| CVE-2022-2890 json | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 5.4 - MEDIUM | 2022-08-22 | 2022-08-23 |
| CVE-2022-2885 json | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 4.8 - MEDIUM | 2022-08-21 | 2022-08-23 |
| CVE-2022-2829 json | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 5.4 - MEDIUM | 2022-08-23 | 2022-08-24 |
| CVE-2022-1411 json | Unrestructed file upload in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. Attacker can send malicious files... | 6.1 - MEDIUM | 2022-05-05 | 2022-05-12 |
| CVE-2022-1340 json | Cross-site Scripting (XSS) - Stored in GitHub repository yetiforcecompany/yetiforcecrm prior to 6.4.0. | 5.4 - MEDIUM | 2022-08-22 | 2022-08-23 |
| CVE-2022-0269 json | Cross-Site Request Forgery (CSRF) in Packagist yetiforce/yetiforce-crm prior to 6.3.0. | 8 - HIGH | 2022-01-24 | 2022-01-28 |
| CVE-2021-4121 json | yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 6.1 - MEDIUM | 2021-12-16 | 2021-12-20 |
| CVE-2021-4117 json | yetiforcecrm is vulnerable to Business Logic Errors | 4.3 - MEDIUM | 2021-12-15 | 2022-08-09 |
| CVE-2021-4116 json | yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 5.4 - MEDIUM | 2021-12-15 | 2021-12-17 |
| CVE-2021-4111 json | yetiforcecrm is vulnerable to Business Logic Errors | 4.3 - MEDIUM | 2021-12-15 | 2022-08-09 |
| CVE-2021-4107 json | yetiforcecrm is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 6.1 - MEDIUM | 2021-12-14 | 2021-12-15 |
| CVE-2021-4092 json | yetiforcecrm is vulnerable to Cross-Site Request Forgery (CSRF) | 4.3 - MEDIUM | 2021-12-11 | 2021-12-14 |