Sos-berlin Jobscheduler — known CVE vulnerabilities

Every CVE whose affected-product data names Sos-berlin Jobscheduler, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-12712 — CVSS 7.5 (high): A vulnerability based on insecure user/password encryption in the JOE (job editor) component of SOS JobScheduler 1.12 and 1.13 allows…
• CVE-2020-6855 — CVSS 6.5 (medium): A large or infinite loop vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to parameterize…
• CVE-2020-6856 — CVSS 6.5 (medium): An XML External Entity (XEE) vulnerability exists in the JOC Cockpit component of SOS JobScheduler 1.12 and 1.13.2 allows attackers to read…
• CVE-2023-37272 — CVSS 6.3 (medium): JS7 is an Open Source Job Scheduler. Users specify file names when uploading files holding user-generated documentation for JOC Cockpit…
• CVE-2020-6854 — CVSS 5.4 (medium): A cross-site scripting (XSS) vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to inject…