Dmasoftlab

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Dmasoftlab records in CISA KEV

No Dmasoftlab vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Dma Radius Manager · all components

TI-2021-09916 CVE-2021-29012 · GHSA-c9c3-4c2f-4w5r

MEDIUM 48

DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03205 Published 2021-04-02 No fix listed CWE-287

TI-2021-09915 CVE-2021-29011 · GHSA-g2c2-jfjx-j48j

LOW 30

DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01392 Published 2021-04-02 No fix listed CWE-79