Squaredup

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Squaredup records in CISA KEV

No Squaredup vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Squaredup 9 records MEDIUM Dashboard Server 3 records LOW Squaredup Ds For Scom 1 record LOW

Records

9 records in Squaredup · all components

TI-2021-17287 CVE-2021-40091 · GHSA-7p58-rq3f-p4j3

An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.

MEDIUM 44

An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0109 Published 2021-12-06 No fix listed CWE-918

TI-2020-07508 CVE-2020-9388 · GHSA-2f25-c9pg-f9fc

CSRF protection was not present in SquaredUp before version 4.6.0.

LOW 30

CSRF protection was not present in SquaredUp before version 4.6.0.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00786 Published 2021-02-03 No fix listed CWE-352

TI-2021-17292 CVE-2021-40096 · GHSA-8w4w-47r7-gx5v

A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for…

LOW 26

A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some int…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00798 Published 2021-12-07 No fix listed CWE-79

TI-2020-07510 CVE-2020-9390 · GHSA-rwp8-hjvg-qf49

SquaredUp allowed Stored XSS before version 4.6.0.

LOW 26

SquaredUp allowed Stored XSS before version 4.6.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00884 Published 2021-02-03 No fix listed CWE-79

TI-2021-17290 CVE-2021-40094 · GHSA-qv89-64x4-4p5x

A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654.

LOW 25

A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00473 Published 2021-12-07 No fix listed CWE-79

TI-2021-17289 CVE-2021-40093 · GHSA-xp4c-cgxh-h77w

A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for…

LOW 25

A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via dashboard actions.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00605 Published 2021-12-07 No fix listed CWE-79

TI-2021-17288 CVE-2021-40092 · GHSA-v8wc-9v93-v894

A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654…

LOW 25

A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00605 Published 2021-12-07 No fix listed CWE-79

TI-2021-17291 CVE-2021-40095 · GHSA-2v2m-jqm3-cq3x

An issue was discovered in SquaredUp for SCOM 5.2.1.6654.

LOW 24

An issue was discovered in SquaredUp for SCOM 5.2.1.6654.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01014 Published 2021-12-07 No fix listed

TI-2020-07509 CVE-2020-9389 · GHSA-f8pq-r7mv-pvxm

A username enumeration issue was discovered in SquaredUp before version 4.6.0.

LOW 19

A username enumeration issue was discovered in SquaredUp before version 4.6.0.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00942 Published 2021-02-03 No fix listed CWE-203

Open these records in search →

Critical	1
High	0
Medium	11
Low	1
No CVSS	0