本ページは avolvesoftware projectdox に影響する公開済み CVE(NVD の CPE 経由で関連付け)を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS(%) | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2014-5132 | Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses. | [email protected] | 4.3 | 2.04% | 2018-03-27 | 2026-06-16 |
| CVE-2014-5131 | Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse. | [email protected] | 6.5 | 2.61% | 2018-03-27 | 2026-06-16 |
| CVE-2014-5130 | Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token. | [email protected] | 6.5 | 2.61% | 2018-03-27 | 2026-06-16 |
| CVE-2014-5129 | Cross-site scripting (XSS) vulnerability in Avolve Software ProjectDox 8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | [email protected] | 4.3 | 2.34% | 2014-09-11 | 2026-06-16 |