Read the docs

Teradici

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Teradici records in CISA KEV

No Teradici vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

5 records in Pcoip Management Console · all components

Priority LOW 28

Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active session if the user is exposed to a malicious payload.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2020-08-17 Fixed in 20.07 CWE-79
TI-2020-10352 CVE-2020-13174 · GHSA-8fr8-vvgp-v7f5

Clickjacking in - Management Console

Priority LOW 28

The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a malicious link via clickjac…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00661 Published 2020-08-11 No fix listed CWE-1021
Open these records in search →