Evergreen-ils
3 CVEs tracked since 2018. Since Feb 2018, none of them reached CISA KEV.
Evergreen-ils CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2018-02 | 3 | 0 |
Products
The products that kept showing up in Evergreen-ils's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 3 most recently published vulnerabilities affecting Evergreen-ils.
- CVE-2015-2203Evergreen 2.5.9, 2.6.7, and 2.7.4 allows remote authenticated users with STAFF_LOGIN permission to obtain sensitive settings history information by leveraging listing of open-ils.pcrud as a control...6.5
- CVE-2015-2204Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to bypass an intended access restriction and obtain sensitive information about org unit settings by lever...7.5
- CVE-2013-7435The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to obtain sensitive settings history information by leveraging lack of user...6.5
The record
- Peak rank
- #92 in Feb 2018
- Busiest month shown
- Feb 2018, 3 CVEs
- Months with a KEV entry
- 0 since Feb 2018
- Monthly snapshots
- 1 since 2018