Openasset Digital Asset Management
6 CVEs affecting Openasset Digital Asset Management. Latest disclosed: 2020-12-14. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28860 | High | 8.8 | 2020-12-14 | OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating it into its SQL queries, allowing for au… |
CVE-2020-28858 | High | 8.8 | 2020-12-14 | OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user… |
CVE-2020-28856 | High | 7.5 | 2020-12-14 | OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it… |
CVE-2020-28859 | Medium | 6.1 | 2020-12-14 | OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for ref… |
CVE-2020-28857 | Medium | 6.1 | 2020-12-14 | OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for st… |
CVE-2020-28861 | Medium | 5.3 | 2020-12-14 | OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated atta… |