Read the docs

Tollgrade

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Tollgrade records in CISA KEV

No Tollgrade vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smartgrid Lighthouse Sensor Management System 4 records MEDIUM Lighthouse Sms 2 records LOW

Records

6 records

TI-2016-00777 CVE-2016-0863 · GHSA-5r7q-mggf-pv6q

Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor…

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitr…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00602 Published 2016-02-13 No fix listed CWE-352
TI-2016-00780 CVE-2016-0866 · GHSA-9w58-vr95-pxh6

Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor…

Priority LOW 29

Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web script or HTML via un…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00906 Published 2016-02-13 No fix listed CWE-79
TI-2016-05028 CVE-2016-5797 · GHSA-pvwp-r55p-5549

Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed…

Priority LOW 27

Tollgrade LightHouse SMS before 5.1 patch 3 provides different error messages for failed authentication attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a se…

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01276 Published 2016-07-15 No fix listed CWE-200
Open these records in search →