Avolvesoftware Projectdox
4 CVEs affecting Avolvesoftware Projectdox. Latest disclosed: 2018-03-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-5131 | Medium | 6.5 | 2018-03-27 | Avolve Software ProjectDox 8.1 makes it easier for remote authenticated users to obtain sensitive information by leveraging ciphertext reuse. |
CVE-2014-5130 | Medium | 6.5 | 2018-03-27 | Avolve Software ProjectDox 8.1 allows remote authenticated users to obtain sensitive information from other users via vectors involving a direct access token. |
CVE-2014-5132 | Medium | 4.3 | 2018-03-27 | Avolve Software ProjectDox 8.1 allows remote attackers to enumerate users via vectors related to email addresses. |
CVE-2014-5129 | | 2014-09-11 | Cross-site scripting (XSS) vulnerability in Avolve Software ProjectDox 8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vecto… |