Untis Webuntis — known CVE vulnerabilities

Every CVE whose affected-product data names Untis Webuntis, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-10540 — CVSS 8.8 (high): Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules.
• CVE-2020-22453 — CVSS 6.1 (medium): Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information.