LOGITEC CORPORATION

Records45All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high13CVSS 7.0–8.9

Exploited now

LOGITEC CORPORATION records in CISA KEV

No LOGITEC CORPORATION vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Media Server · all components

TI-2017-11464 CVE-2017-15687 · GHSA-pxjp-q78g-3gfg

LOW 30

DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01451 Published 2017-10-23 No fix listed CWE-79

TI-2017-12178 CVE-2017-16567 · GHSA-g6xh-vmjv-c9qj

LOW 29

Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02258 Published 2017-11-09 No fix listed CWE-79

TI-2017-12179 CVE-2017-16568 · GHSA-26v4-3ghx-vmrv

LOW 28

Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Radio" functionality.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01985 Published 2017-11-09 No fix listed CWE-79