Iris - vulnerabilities (CVEs)

7 CVEs in 4 products, 0 in the last 30 days, newest from 2022-09-27.

Products

CVE-2022-37028 - CVSS 5.4 (medium), 2022-09-27: ISAMS 22.2.3.2 is prone to stored Cross-site Scripting (XSS) attack on the title field for groups, allowing an attacker to store a JavaScript payload that…
CVE-2020-28402 - CVSS 8.8 (high), 2021-01-29: An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access Launcher…
CVE-2020-28406 - CVSS 6.5 (medium), 2021-01-29: An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access details about jobs…
CVE-2020-28401 - CVSS 6.5 (medium), 2021-01-29: An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access WIP details about…
CVE-2020-28405 - CVSS 8.8 (high), 2021-01-29: An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to change the privileges of…
CVE-2020-28403 - CVSS 8.8 (high), 2021-01-29: A Cross-Site Request Forgery (CSRF) vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an attacker to change the privileges of…
CVE-2020-28404 - CVSS 6.5 (medium), 2021-01-29: An improper authorization vulnerability exists in Star Practice Management Web version 2019.2.0.6, allowing an unauthorized user to access the Billing page…