CWE-473 — known CVE vulnerabilities

CVEs classified under CWE-473, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-36845 — CVSS 9.8 (critical) — actively exploited: A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an…
• CVE-2024-27489 — CVSS 7.5 (high): An issue in the DelFile() function of WMCMS v4.4 allows attackers to delete arbitrary files via a crafted POST request.
• CVE-2023-36844 — CVSS 5.3 (medium) — actively exploited: A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series allows an unauthenticated…