Read the docs

Novnc

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Novnc records in CISA KEV

No Novnc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 35

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04788 Published 2019-09-25 Partial fix · 0.6.2 CWE-79
Open these records in search →