HMS Networks

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

HMS Networks records in CISA KEV

No HMS Networks vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Ewon Cosy Firmware · all components

TI-2020-08545 CVE-2020-10633 · GHSA-22gj-rr23-9xgc

LOW 28

A non-persistent XSS (cross-site scripting) vulnerability exists in eWON Flexy and Cosy (all firmware versions prior to 14.1s0).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00687 Published 2020-04-08 Fixed in 14.1s0 CWE-79

TI-2020-12759 CVE-2020-16230 · GHSA-m3wp-9jj9-qqp4

LOW 12

All version of Ewon Flexy and Cosy prior to 14.1 use wildcards such as (*) under which domains can request resources.

CVSS 3.1LOW 2.3 Local High privileges No interaction EPSS 0.0034 Published 2020-09-18 Fixed in 14.1