Ortussolutions Testbox — known CVE vulnerabilities

Every CVE whose affected-product data names Ortussolutions Testbox, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-15929 — CVSS 9.8 (critical): In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters passed to system/runners/HTMLRunner.cfm allow an attacker to…
• CVE-2020-15928 — CVSS 5.3 (medium): In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters to test-browser/index.cfm allow directory traversal.