Cross-Site Request Forgery

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restrict callback values, which allows remot…CVE-2015-2912Orientdb · 1.3% likely

   CWE-352

2. OrientDB 3.0.17 Cross-Site Request ForgeryCVE-2019-25447Orientdb · CVSS 4.3 · 0.2% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.