Vulnerabilities

TI-2021-20379 CVE-2021-45026 · GHSA-c8r8-rcww-x6g5

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).

LOW 30

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01196 Published 2022-06-17 No fix listed CWE-79

TI-2021-20378 CVE-2021-45025 · GHSA-v63c-6qf8-qq2c

ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise…

LOW 34

ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cleartext Storage of Sensitive Information in a Cookie.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00607 Published 2022-06-17 No fix listed CWE-312

TI-2021-20377 CVE-2021-45024 · GHSA-64vq-q588-gmpm

ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise…

MEDIUM 44

ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity (XXE).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01124 Published 2022-06-17 No fix listed CWE-611

Vulnerabilities

Filters

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).

ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise…

ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise…