Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00496·Published 2023-09-05·Fixed in 7.9.6CWE-601
Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script.
CVSS 3.1MEDIUM 5.4·Network·Low privileges·User interaction·EPSS 0.00441·Published 2023-09-05·Fixed in 7.9.6CWE-79
Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inject an arbitrary script.
CVSS 3.1MEDIUM 5.4·Network·Low privileges·User interaction·EPSS 0.00441·Published 2023-09-05·Fixed in 7.9.6CWE-79
THREATIST.IORead the docs