Read the docs

WBSAirback

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

WBSAirback records in CISA KEV

No WBSAirback vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wbsairback 16 records MEDIUM

Records

16 records in Wbsairback · all components

TI-2024-03528 CVE-2024-3782 · GHSA-p4vq-xcmp-gvqq

Cross-Site Request Forgery (CSRF) vulnerability in WBSAirback

Priority MEDIUM 40

Cross-Site Request Forgery vulnerability in WBSAirback 21.02.04, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged user.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2024-04-15 No fix listed CWE-352
TI-2024-03529 CVE-2024-3783 · GHSA-xrm4-23hc-gwj2

Path Traversal vulnerability in WBSAirback

Priority LOW 34

The Backup Agents section in WBSAirback 21.02.04 is affected by a Path Traversal vulnerability, allowing a user with low privileges to download files from the system.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00532 Published 2024-04-15 No fix listed CWE-22
TI-2024-03542 CVE-2024-3796 · GHSA-6gf8-6jhr-vrww

Cross-site Scripting vulnerability in WBSAirback

Priority LOW 22

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/BackupSchedule, description field.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00408 Published 2024-04-15 No fix listed CWE-79
TI-2024-03541 CVE-2024-3795 · GHSA-x7h2-j795-83vg

Cross-site Scripting vulnerability in WBSAirback

Priority LOW 22

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/BackupTemplate, name / description fields.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0038 Published 2024-04-15 No fix listed CWE-79
TI-2024-03540 CVE-2024-3794 · GHSA-fcq8-3x5r-8cpc

Cross-site Scripting vulnerability in WBSAirback

Priority LOW 22

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/AdvancedSystem, description field, all parameters.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0038 Published 2024-04-15 No fix listed CWE-79
TI-2024-03539 CVE-2024-3793 · GHSA-7v23-ggpr-r58j

Cross-site Scripting vulnerability in WBSAirback

Priority LOW 22

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/CloudAccounts, account name / user password / server fields, all parameters.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0038 Published 2024-04-15 No fix listed CWE-79
TI-2024-03538 CVE-2024-3792 · GHSA-5xvh-qhhj-5v4v

Cross-site Scripting vulnerability in WBSAirback

Priority LOW 22

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/DeviceReplication, execution range field, all parameters.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0047 Published 2024-04-15 No fix listed CWE-79
TI-2024-03537 CVE-2024-3791 · GHSA-rrvh-w4fw-7gmv

Cross-site Scripting vulnerability in WBSAirback

Priority LOW 22

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/SystemConfiguration, name / free memory limit fields , type / password parameters.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0038 Published 2024-04-15 No fix listed CWE-79
TI-2024-03536 CVE-2024-3790 · GHSA-9j76-vhxq-c93p

Cross-site Scripting vulnerability in WBSAirback

Priority LOW 22

Vulnerability in WBSAirback 21.02.04, which consists of a stored Cross-Site Scripting (XSS) through /admin/SystemUsers, login / description fields, passwd1/ passwd2 parameters.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0038 Published 2024-04-15 No fix listed CWE-79
Open these records in search →