Intesync Solismed — known CVE vulnerabilities

Every CVE whose affected-product data names Intesync Solismed, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2019-15933 — CVSS 9.8 (critical): Intesync Solismed 3.3sp has SQL Injection.
• CVE-2019-15931 — CVSS 9.8 (critical): Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246.
• CVE-2019-15932 — CVSS 9.8 (critical): Intesync Solismed 3.3sp has Incorrect Access Control.
• CVE-2019-16246 — CVSS 9.8 (critical): Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931. This leads to unauthenticated…
• CVE-2019-15936 — CVSS 9.8 (critical): Intesync Solismed 3.3sp allows Insecure File Upload.
• CVE-2019-15934 — CVSS 8.8 (high): Intesync Solismed 3.3sp has CSRF.
• CVE-2019-15935 — CVSS 6.1 (medium): Intesync Solismed 3.3sp has XSS.
• CVE-2019-17428 — CVSS 5.9 (medium): An issue was discovered in Intesync Solismed 3.3sp1. An flaw in the encryption implementation exists, allowing for all encrypted data…
• CVE-2019-15930 — CVSS 4.3 (medium): Intesync Solismed 3.3sp allows Clickjacking.