invision power services invision board

Name: invision power services invision board
Brand: invision power services

productUS

cpe:2.3:a:invision_power_services:invision_board:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical6high13medium0low

updated 2026-10-28

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2005-1598US	high7.5	13.9% (97th)	Exploit	no fix	2005-05-16	8 versions
CVE-2005-3547US	medium4.3	2.71% (86th)	Exploit	no fix	2005-11-16	= 2.1
CVE-2005-1597US	medium4.3	2.38% (84th)	Exploit	no fix	2005-05-16	8 versions
CVE-2005-2542US	medium5.0	2.24% (83rd)	Exploit	no fix	2005-08-10	10 versions
CVE-2005-1817US	medium5.0	1.91% (80th)	Exploit	no fix	2005-06-01	7 versions
CVE-2006-2061US	medium5.0	1.61% (76th)	Exploit	no fix	2006-04-26	12 versions
CVE-2004-1531US	high7.5	1.34% (71st)	Exploit	no fix	2004-12-31	3 versions
CVE-2005-0886US	medium4.3	1.31% (71st)	Exploit	no fix	2005-05-02	15 versions
CVE-2005-1070US	high7.5	1.07% (65th)	Exploit	no fix	2005-04-11	8 versions
CVE-2004-0359US	medium6.8	5.62% (93rd)	—	no fix	2004-11-23	2 versions
CVE-2004-0338US	high10.0	2.36% (84th)	—	no fix	2004-11-23	8 versions
CVE-2002-1149US	medium5.0	2.27% (83rd)	—	no fix	2002-10-11	2 versions
CVE-2005-3549US	medium6.5	1.87% (79th)	—	no fix	2005-11-16	= 2.0.1
CVE-2004-0355US	medium5.0	1.69% (77th)	—	no fix	2004-11-23	= 1.3
CVE-2004-1785US	high7.5	1.42% (73rd)	—	no fix	2004-01-03	6 versions
CVE-2006-3544US	high7.5	1.37% (72nd)	—	no fix	2006-07-13	2 versions
CVE-2005-3548US	medium4.0	1.31% (70th)	—	no fix	2005-11-16	= 2.0.1
CVE-2003-1454US	medium5.0OT elevated	1.22% (69th)	—	no fix	2003-12-31	3 versions
CVE-2005-1816US	medium4.6	0.50% (42nd)	—	no fix	2005-06-01	17 versions

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')7 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-212Improper Removal of Sensitive Information Before Storage or Transfer1 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-256Plaintext Storage of a Password1 CVEs
CWE-264CWE-2641 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.