Promise

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Promise records in CISA KEV

No Promise vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Webpam Proe 1 record LOW

Records

1 record

TI-2018-04866 CVE-2018-6603 · GHSA-46vp-w65m-8xhv

Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP…

LOW 29

Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Injection attacks via JavaScript code in a PHPSESSID cookie.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00754 Published 2018-02-07 No fix listed CWE-74

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0