VendorsVanderbiltredcap4.14.2
Vulnerabilities

Vanderbilt Redcap 4.14.2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2013-4611
Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants page.
Published 2013-06-17 · Modified
10.0EPSS 0.029
CVE-2013-4610
Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap before 5.0.3 and 5.1.x before 5.1.2 has unknown impact and remote attack vectors.
Published 2013-06-17 · Modified
10.0EPSS 0.017
CVE-2013-4609
REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass intended access restrictions via (1) the Online Designer or (2) the Data Dictionary upload, as demonstrated by an eval call.
Published 2013-06-17 · Modified
6.5EPSS 0.015
CVE-2013-4612
Multiple cross-site scripting (XSS) vulnerabilities in REDCap before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving different modules.
Published 2013-06-17 · Modified
4.3EPSS 0.014
CVE-2012-6564
Cross-site scripting (XSS) vulnerability in REDCap before 4.14.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published 2013-06-17 · Modified
4.3EPSS 0.014
CVE-2013-4608
Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page.
Published 2013-06-17 · Modified
4.3EPSS 0.012