Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Webport records in CISA KEVNo Webport vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 45
SQL Injection vulnerability in WebPort <=1.19.1 via the new connection, parameter name in type-conn.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01357 · Published 2021-06-24 · No fix listed CWE-89
Priority LOW 39
Web Port 1.19.1 allows XSS via the /log type parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.09872 · Published 2019-05-30 · No fix listed CWE-79
Priority LOW 34
Web Port 1.19.1 allows XSS via the /access/setup type parameter.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03833 · Published 2019-05-30 · No fix listed CWE-79
Priority LOW 27
Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01653 · Published 2021-06-24 · No fix listed CWE-22
Priority LOW 26
Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcalls.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00758 · Published 2021-06-24 · No fix listed CWE-79
Priority LOW 26
Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00728 · Published 2021-06-24 · No fix listed CWE-79
Priority LOW 25
WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00557 · Published 2020-08-26 · No fix listed CWE-79
THREATIST.IORead the docs