Boodskap Iot Platform — known CVE vulnerabilities

Every CVE whose affected-product data names Boodskap Iot Platform, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-35135 — CVSS 8.8 (high): Boodskap IoT Platform v4.4.9-02 allows attackers to escalate privileges via a crafted request sent to /api/user/upsert/<uuid>.
• CVE-2022-35136 — CVSS 6.5 (medium): Boodskap IoT Platform v4.4.9-02 allows attackers to make unauthenticated API requests.
• CVE-2022-35134 — CVSS 5.4 (medium): Boodskap IoT Platform v4.4.9-02 contains a cross-site scripting (XSS) vulnerability.