ByteOS Network

NVD Vulnerability Details :

CVE-2017-20045

Analyzed

Source-cna@vuldb.com

Published At-13 Jun, 2022 | 07:15

Updated At-21 Oct, 2022 | 17:17

A vulnerability was found in Navetti PricePoint 4.6.0.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.0.0 is able to address this issue. It is recommended to upgrade the affected component.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Secondary	3.1	7.3	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

vendavo>>pricepoint>>4.6.0.0

cpe:2.3:a:vendavo:pricepoint:4.6.0.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-352	Primary	nvd@nist.gov
CWE-352	Secondary	cna@vuldb.com

References

Hyperlink	Source	Resource
http://seclists.org/fulldisclosure/2017/Mar/24	cna@vuldb.com	Exploit Mailing List Third Party Advisory
https://vuldb.com/?id.97864	cna@vuldb.com	Third Party Advisory VDB Entry

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History