Skip to content
OpenAdvisories

Vendor

SearchBlox

5 known vulnerabilities.

Products

SearchBlox 5
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2020-10132 Public exploit

    CVE-2020-10132

    SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration.

    SearchBlox SearchBlox
  • Unscored —
    CVE-2020-10131 Public exploit

    CVE-2020-10131

    SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.

    SearchBlox SearchBlox
  • Unscored —
    CVE-2020-10130 Public exploit

    CVE-2020-10130

    SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super admin users in the system.

    SearchBlox SearchBlox
  • Unscored —
    CVE-2020-10129 Public exploit

    CVE-2020-10129

    SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality.

    SearchBlox SearchBlox
  • Unscored —
    CVE-2020-10128 Public exploit

    SearchBlox product before V-9.2.1 is vulnerable to Stored-Cross Site Scripting

    SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript.

    SearchBlox SearchBlox