Vendors / Dundas Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Dundas records in CISA KEV No Dundas vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests (with certain restrictions) that will be executed on behalf of the attacker,…
CVSS 3.0 HIGH 8.6· Network · No auth · No interaction · EPSS 0.01472 · Published 2019-02-11 · No fix listed CWE-918
Priority LOW 25
The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2020-11-10 · No fix listed CWE-79
Priority LOW 25
The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00545 · Published 2020-11-10 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 2 0 0
