Advisories · Technology

Zephyr Project Manager.

Every CVE that names Zephyr Project Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-6536 CVE record

CVSS 5.4 Medium

Zephyr Project Manager < 3.3.99 - Editor+ XSS
- Zephyr Project Manager
Not analysed yet 30 Jul 2024
CVE-2022-2839 CVE record

Zephyr Project Manager < 3.2.55 - Unauthorised AJAX Calls To Stored XSS
- Zephyr Project Manager
- Cross-site scripting (XSS)
- Cross-site request forgery (CSRF)
Not analysed yet 3 Oct 2022
CVE-2022-3333 CVE record

CVSS 3.5 Low

Zephyr Project Manager REST Call cross site scripting
- Zephyr Project Manager
- CWE-707
Not analysed yet 28 Sept 2022
CVE-2022-2840 CVE record

Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi
- Zephyr Project Manager
- SQL injection
Not analysed yet 19 Sept 2022