Qcms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Qcms records in CISA KEV

No Qcms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2018-05837 CVE-2018-8070 · GHSA-7jpr-w6wx-6h85

LOW 25

QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2018-03-12 No fix listed CWE-79

TI-2018-05836 CVE-2018-8069 · GHSA-ggm7-88j7-654m

LOW 25

QCMS version 3.0 has XSS via the webname parameter to the /backend/system.html URI.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00513 Published 2018-03-12 No fix listed CWE-79