vehicle service management system project vehicle service management system

Name: vehicle service management system project vehicle service management system
Brand: vehicle service management system project

productUS

cpe:2.3:a:vehicle_service_management_system_project:vehicle_service_management_system:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

6critical3high11medium0low

updated 2026-10-28

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-46067US	critical9.8	5.14% (92nd)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2021-46079US	high7.2	3.31% (88th)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2021-46076US	high8.8	3.31% (88th)	Exploit	no fix	2022-01-06	= 1.0
CVE-2021-46073US	medium4.8	2.74% (86th)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2021-46072US	medium4.8	2.74% (86th)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2021-46071US	medium4.8	2.74% (86th)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2021-46069US	medium4.8	2.74% (86th)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2021-46068US	medium4.8	2.74% (86th)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2021-46075US	high7.2OT elevated	2.62% (85th)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2021-46078US	medium4.8	1.26% (69th)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2021-46074US	medium4.8	1.14% (67th)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2021-46070US	medium4.8	0.88% (59th)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2021-41962US	medium4.8	0.62% (50th)	Exploit	no fix	2021-12-16	= 1.0
CVE-2021-46080US	medium4.8	0.58% (48th)	Exploit	no fix	2022-01-06	≤ 1.0
CVE-2023-2097US	critical9.8	0.84% (58th)	—	no fix	2023-04-15	= 1.0
CVE-2023-2096US	critical9.8	0.75% (55th)	—	no fix	2023-04-15	= 1.0
CVE-2023-2095US	critical9.8	0.75% (55th)	—	no fix	2023-04-15	= 1.0
CVE-2023-2093US	critical9.8	0.75% (55th)	—	no fix	2023-04-15	= 1.0
CVE-2023-2092US	critical9.8	0.75% (55th)	—	no fix	2023-04-15	= 1.0
CVE-2023-2099US	medium6.1	0.65% (51st)	—	no fix	2023-04-15	= 1.0

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type3 CVEs
CWE-315Cleartext Storage of Sensitive Information in a Cookie1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.