Vendors / Vertiv Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 5
Exploited now Vertiv records in CISA KEV No Vertiv vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the application incorrectly neutralizes code syntax before executing.
CVSS 3.1 HIGH 8.3· Network · No auth · User interaction · EPSS 0.02167 · Published 2020-03-30 · No fix listed CWE-95
Priority LOW 30
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter.
CVSS 3.1 MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00917 · Published 2020-03-30 · No fix listed CWE-79
Priority LOW 29
The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS.
CVSS 3.1 MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00629 · Published 2020-03-30 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
3 5 4 0 0
