Vulnerabilidades en microweber

86 resultados
Análisis Vexday

Com 81 CVEs catalogadas, o Microweber apresenta um volume considerável de vulnerabilidades, embora nenhuma esteja atualmente registrada no catálogo KEV da CISA, posicionando-o abaixo da média geral de exploração ativa. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), o que indica fragilidades persistentes na sanitização de entradas e saídas da aplicação. A CVE mais preocupante no momento é CVE-2022-0557, com score EPSS de 0,51, sugerindo probabilidade relevante de exploração — atenção especial é recomendada para ambientes que ainda não aplicaram a correção correspondente. A ausência de novas CVEs nos últimos 90 dias e a existência de apenas 2 provas de conceito públicas reduzem a superfície de risco imediato, mas as 5 vulnerabilidades críticas catalogadas mantêm a necessidade de monitoramento contínuo.

CVE-2022-2252MEDIUMOpen Redirect in microweber/microweberEPSS 0.9%CVE-2022-0688CRITICALBusiness Logic Errors in microweber/microweberEPSS 0.9%CVE-2022-0719HIGHCross-site Scripting (XSS) - Reflected in microweber/microweberEPSS 0.9%CVE-2022-0930HIGHFile upload filter bypass leading to stored XSS in microweber/microweberEPSS 0.9%CVE-2022-0558CRITICALCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.9%CVE-2022-0723HIGHCross-site Scripting (XSS) - Reflected in microweber/microweberEPSS 0.9%CVE-2022-0379HIGHCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.9%CVE-2022-1584MEDIUMReflected XSS in microweber/microweberEPSS 0.8%CVE-2022-0926HIGHFile upload filter bypass leading to stored XSS in microweber/microweberEPSS 0.8%CVE-2022-0278HIGHCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.7%CVE-2022-3245MEDIUM Code Injection in display of tag title on saving tags in microweber/microweberEPSS 0.7%CVE-2021-32857MEDIUMCockpit vulnerable to Cross-site ScriptingEPSS 0.7%CVE-2023-2240HIGHImproper Privilege Management in microweber/microweberEPSS 0.7%CVE-2022-0505MEDIUMCross-Site Request Forgery (CSRF) in microweber/microweberEPSS 0.7%CVE-2022-2495MEDIUMCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.7%CVE-2022-0762MEDIUMIncorrect Authorization in microweber/microweberEPSS 0.7%CVE-2022-0506HIGHCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.6%CVE-2021-32856MEDIUMMicroweber vulnerable to Cross-site ScriptingEPSS 0.6%CVE-2022-0906MEDIUMUnrestricted file upload leads to stored XSS in microweber/microweberEPSS 0.6%CVE-2022-0763MEDIUMCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.6%