Steelcase

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Steelcase records in CISA KEV

No Steelcase vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2018-05120 CVE-2018-7055 · GHSA-rg43-2qfx-hv4g

LOW 35

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01106 Published 2018-02-15 No fix listed CWE-918

TI-2018-05122 CVE-2018-7057 · GHSA-g6jf-2287-2h68

LOW 28

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00652 Published 2018-02-15 No fix listed CWE-79

TI-2018-05121 CVE-2018-7056 · GHSA-cxx8-pmxr-m9gr

LOW 26

RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01085 Published 2018-02-15 No fix listed CWE-200