Vulnerabilidades em microweber

84 resultados
Análise Vexday

Com 81 CVEs catalogadas, o Microweber apresenta um volume considerável de vulnerabilidades, embora nenhuma esteja atualmente registrada no catálogo KEV da CISA, posicionando-o abaixo da média geral de exploração ativa. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), o que indica fragilidades persistentes na sanitização de entradas e saídas da aplicação. A CVE mais preocupante no momento é CVE-2022-0557, com score EPSS de 0,51, sugerindo probabilidade relevante de exploração — atenção especial é recomendada para ambientes que ainda não aplicaram a correção correspondente. A ausência de novas CVEs nos últimos 90 dias e a existência de apenas 2 provas de conceito públicas reduzem a superfície de risco imediato, mas as 5 vulnerabilidades críticas catalogadas mantêm a necessidade de monitoramento contínuo.

CVE-2022-0596MEDIUMImproper Validation of Specified Quantity in Input in microweber/microweberEPSS 0.6%CVE-2022-4617LOWCross-site Scripting (XSS) - Reflected in microweber/microweberEPSS 0.6%CVE-2022-2280MEDIUMCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.6%CVE-2023-5318MEDIUMUse of Hard-coded Credentials in microweber/microweberEPSS 0.5%CVE-2022-2300MEDIUMCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.5%CVE-2022-0912MEDIUMUnrestricted Upload of File with Dangerous Type in microweber/microweberEPSS 0.5%CVE-2022-2353MEDIUMCross-Site Request Forgery (CSRF) in microweber/microweberEPSS 0.5%CVE-2023-0608MEDIUMCross-site Scripting (XSS) - DOM in microweber/microweberEPSS 0.5%CVE-2023-6832MEDIUMBusiness Logic Errors in microweber/microweberEPSS 0.5%CVE-2023-2239HIGHExposure of Private Personal Information to an Unauthorized Actor in microweber/microweberEPSS 0.5%CVE-2023-1881HIGHCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.5%CVE-2023-6599LOWMissing Standardized Error Handling Mechanism in microweber/microweberEPSS 0.5%CVE-2022-4647MEDIUMCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.5%CVE-2023-6566MEDIUMBusiness Logic Errors in microweber/microweberEPSS 0.5%CVE-2023-2014MEDIUMCross-site Scripting (XSS) - Generic in microweber/microweberEPSS 0.5%CVE-2026-65693HIGHMicroweber CMS 2.0.20 Server-Side Template Injection via Mail TemplatesEPSS 0.5%CVE-2022-2777MEDIUMCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.4%CVE-2023-5861MEDIUMCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.4%CVE-2023-1081MEDIUMCross-site Scripting (XSS) - Stored in microweber/microweberEPSS 0.4%CVE-2023-5976MEDIUMImproper Access Control in microweber/microweberEPSS 0.4%