Coins-Global Coins Construction Cloud
7 CVEs affecting Coins-Global Coins Construction Cloud. Latest disclosed: 2022-04-14. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-45222 | High | 8.8 | 2022-01-24 | An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is vulnerable to privilege escalation by… |
CVE-2021-45226 | Medium | 6.5 | 2022-01-24 | An issue was discovered in COINS Construction Cloud 11.12. Due to improper validation of user-controlled HTTP headers, attackers can cause it to send password-… |
CVE-2021-45223 | Medium | 6.5 | 2022-01-24 | An issue was discovered in COINS Construction Cloud 11.12. Due to insufficient input neutralization, it is vulnerable to denial of service attacks via forced s… |
CVE-2021-45225 | Medium | 6.1 | 2022-01-24 | An issue was discovered in COINS Construction Cloud 11.12. Due to improper input neutralization, it is vulnerable to reflected cross-site scripting (XSS) via m… |
CVE-2021-45224 | Medium | 6.1 | 2022-01-24 | An issue was discovered in COINS Construction Cloud 11.12. In several locations throughout the application, JavaScript code is passed as a URL parameter. Attac… |
CVE-2021-45228 | Medium | 5.4 | 2022-04-14 | An XSS issue was discovered in COINS Construction Cloud 11.12. Due to insufficient neutralization of user input in the description of a task, it is possible to… |
CVE-2021-45227 | Medium | 5.4 | 2022-04-14 | An issue was discovered in COINS Construction Cloud 11.12. Due to an inappropriate use of HTML IFRAME elements, the file upload functionality is vulnerable to… |