CyberSecBulletin

Evasys vulnerabilities

We track 2 vulnerabilities in Evasys products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 2, 2023.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest Evasys vulnerabilities

  • 8.1 High severity

    Evasys: Incorrect Authorization

    CVE-2023-31435Evasys

    Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire previews) in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allow authenticated attackers to read and write to unauthorized data

  • 8.8 High severity

    Evasys: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2023-31433Evasys

    A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the welche parameter.