yamcs

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

yamcs records in CISA KEV

No yamcs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yamcs 11 records HIGH Yacms 3 records MEDIUM

Records

3 records in Yacms · all components

TI-2023-25022 CVE-2023-46471 · GHSA-7xqf-whj5-xm7f

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a…

MEDIUM 58

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00603 Published 2023-11-20 No fix listed CWE-79

TI-2023-25599 CVE-2023-47311 · GHSA-75g5-m988-7348

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking.

LOW 28

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00419 Published 2023-11-20 No fix listed CWE-1021

TI-2023-25021 CVE-2023-46470 · GHSA-5m96-93vv-3v3x

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a…

LOW 25

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00603 Published 2023-11-20 No fix listed CWE-79

Open these records in search →

Critical	8
High	3
Medium	13
Low	0
No CVSS	0