彙總 prise 相關全部產品的 CVE 與安全漏洞情報，包括 CVSS、EPSS、公開時間與漏洞情報資料。
已披露問題常與 跨站腳本、路徑處理缺陷與CSRF 相關，可能在 軟體部署與生產負載 場景中帶來 工作階段劫持與檔案覆寫 等暴露風險。
相關漏洞資料主要來源於公開漏洞披露與安全公告，可用於評估歷史漏洞暴露面與修補優先順序。
| CVE | 摘要 | 來源 | 最高 CVSS | EPSS % | 公開時間 | 更新時間 |
|---|---|---|---|---|---|---|
| CVE-2019-15089 | An issue was discovered in PRiSE adAS 1.7.0. Forms have no CSRF protection, letting an attacker execute actions as the administrator. | [email protected] | 8.8 | 0.57% | 2019-09-20 | 2026-06-16 |
| CVE-2019-15088 | An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication. | [email protected] | 9.8 | 1.72% | 2019-09-20 | 2026-06-16 |
| CVE-2019-15087 | An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution. | [email protected] | 7.2 | 3.33% | 2019-09-20 | 2026-06-16 |
| CVE-2019-15086 | An issue was discovered in PRiSE adAS 1.7.0. The newentityID parameter is not properly escaped, leading to a reflected XSS in the error message. | [email protected] | 6.1 | 0.80% | 2019-09-20 | 2026-06-16 |
| CVE-2019-15085 | An issue was discovered in PRiSE adAS 1.7.0. The current database password is embedded in the change password form. | [email protected] | 7.5 | 1.37% | 2019-09-20 | 2026-06-16 |
| CVE-2019-14916 | An issue was discovered in PRiSE adAS 1.7.0. A file's format is not properly checked, leading to an unrestricted file upload. | [email protected] | 6.5 | 1.04% | 2019-09-20 | 2026-06-16 |
| CVE-2019-14915 | An issue was discovered in PRiSE adAS 1.7.0. Certificate data are not properly escaped. This leads to XSS when submitting a rogue certificate. | [email protected] | 6.1 | 0.52% | 2019-09-20 | 2026-06-16 |
| CVE-2019-14914 | An issue was discovered in PRiSE adAS 1.7.0. The path is not properly escaped in the medatadata_del method, leading to an arbitrary file read and deletion via Directory Traversal. | [email protected] | 9.1 | 2.02% | 2019-09-20 | 2026-06-16 |
| CVE-2019-14913 | An issue was discovered in PRiSE adAS 1.7.0. Log data are not properly escaped, leading to persistent XSS in the administration panel. | [email protected] | 5.4 | 0.86% | 2019-09-20 | 2026-06-16 |
| CVE-2019-14912 | An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly check the goto parameter, leading to an open redirect that leaks the session cookie. | [email protected] | 6.1 | 1.20% | 2019-09-20 | 2026-06-16 |
| CVE-2019-14911 | An issue was discovered in PRiSE adAS 1.7.0. The OPENSSO module does not properly escape output on error, leading to reflected XSS. | [email protected] | 6.1 | 1.03% | 2019-09-20 | 2026-06-16 |