Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

project-redcap redcap 4.15.2 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2013-4608
Cross-site scripting (XSS) vulnerability in REDCap prior to 5.0.6 allows remote malicious users to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page.
Project-redcap Redcap 5.0.1Project-redcap Redcap 4.14.6Project-redcap Redcap 4.15.0Project-redcap Redcap 4.15.2Project-redcap Redcap 5.0.4Project-redcap Redcap 5.0.3Project-redcap Redcap 4.15.3Project-redcap Redcap 4.15.4Vanderbilt Redcap 4.14.4Vanderbilt Redcap 4.14.3Vanderbilt Redcap 4.14.2Vanderbilt Redcap 4.14.1Project-redcap Redcap 4.13.18Vanderbilt RedcapProject-redcap Redcap 5.0.2Project-redcap Redcap 5.0.0Project-redcap Redcap 4.14.5Vanderbilt Redcap 4.14.0Project-redcap Redcap 4.15.1
10
CVSSv2
CVE-2013-4610
Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap prior to 5.0.3 and 5.1.x prior to 5.1.2 has unknown impact and remote attack vectors.
Project-redcap Redcap 5.0.0Project-redcap Redcap 4.14.5Project-redcap Redcap 4.15.1Project-redcap Redcap 4.15.3Project-redcap Redcap 5.1.1Project-redcap Redcap 4.15.4Project-redcap Redcap 4.13.18Project-redcap Redcap 5.0.6Project-redcap Redcap 5.1.0Vanderbilt Redcap 4.14.4Vanderbilt Redcap 4.14.3Vanderbilt Redcap 4.14.2Vanderbilt Redcap 4.14.1Vanderbilt Redcap 4.14.0Project-redcap Redcap 5.0.1Project-redcap Redcap 4.14.6Project-redcap Redcap 4.15.0Project-redcap Redcap 4.15.2Vanderbilt Redcap
6.5
CVSSv2
CVE-2013-4609
REDCap prior to 5.0.4 and 5.1.x prior to 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass intended access restrictions via (1) the Online Designer or (2) the Data Dictionary upload, as dem...
Project-redcap Redcap 5.0.0Project-redcap Redcap 4.14.5Vanderbilt Redcap 4.14.0Project-redcap Redcap 4.15.1Project-redcap Redcap 4.15.3Project-redcap Redcap 5.1.2Project-redcap Redcap 5.0.2Project-redcap Redcap 4.15.4Project-redcap Redcap 4.13.18Vanderbilt RedcapProject-redcap Redcap 5.1.1Vanderbilt Redcap 4.14.4Vanderbilt Redcap 4.14.3Vanderbilt Redcap 4.14.2Vanderbilt Redcap 4.14.1Project-redcap Redcap 5.0.1Project-redcap Redcap 4.14.6Project-redcap Redcap 4.15.0Project-redcap Redcap 4.15.2Project-redcap Redcap 5.1.0
4.3
CVSSv2
CVE-2013-4612
Multiple cross-site scripting (XSS) vulnerabilities in REDCap prior to 5.1.0 allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors involving different modules.
Project-redcap Redcap 5.0.0Project-redcap Redcap 4.14.5Vanderbilt Redcap 4.14.0Project-redcap Redcap 4.15.1Project-redcap Redcap 5.0.5Project-redcap Redcap 5.0.4Project-redcap Redcap 5.0.3Project-redcap Redcap 5.0.2Project-redcap Redcap 4.15.3Project-redcap Redcap 4.15.4Project-redcap Redcap 4.13.18Vanderbilt Redcap 4.14.4Vanderbilt Redcap 4.14.3Vanderbilt Redcap 4.14.2Vanderbilt Redcap 4.14.1Vanderbilt RedcapProject-redcap Redcap 5.0.1Project-redcap Redcap 4.14.6Project-redcap Redcap 4.15.0Project-redcap Redcap 4.15.2
10
CVSSv2
CVE-2013-4611
Multiple unspecified vulnerabilities in REDCap prior to 5.1.1 allow remote malicious users to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page.
Project-redcap Redcap 5.0.1Project-redcap Redcap 4.14.6Vanderbilt Redcap 4.14.1Project-redcap Redcap 4.15.0Project-redcap Redcap 4.15.2Vanderbilt RedcapProject-redcap Redcap 4.14.5Vanderbilt Redcap 4.14.4Vanderbilt Redcap 4.14.3Vanderbilt Redcap 4.14.2Project-redcap Redcap 5.0.5Project-redcap Redcap 5.0.4Project-redcap Redcap 5.0.3Project-redcap Redcap 4.15.3Project-redcap Redcap 4.15.4Project-redcap Redcap 4.13.18Project-redcap Redcap 5.0.6Project-redcap Redcap 5.0.2Project-redcap Redcap 5.0.0Vanderbilt Redcap 4.14.0Project-redcap Redcap 4.15.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook