Pleasantsolutions Pleasant Password Server — known CVE vulnerabilities

Every CVE whose affected-product data names Pleasantsolutions Pleasant Password Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-17707 — CVSS 8.1 (high): Due to missing authorization checks, any authenticated user is able to list, upload, or delete attachments to password safe entries in…
• CVE-2023-27121 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server…
• CVE-2017-17708 — CVSS 4.3 (medium): Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant…