Vulnerabilities

TI-2019-06944 CVE-2019-9509 · GHSA-pcgh-c3ww-gxh7

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected cross site scripting

LOW 30

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00917 Published 2020-03-30 No fix listed CWE-79

TI-2019-06943 CVE-2019-9508 · GHSA-5hq8-wjj7-762c

Vertiv Avocent UMG-4000 version 4.2.1.19 web interface is vulnerable to stored cross site scripting

LOW 29

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00629 Published 2020-03-30 No fix listed CWE-79

TI-2019-06942 CVE-2019-9507 · GHSA-jm59-pj3c-8mvf

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to arbitrary remote code execution

MEDIUM 40

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the application incorrectly neutralizes code syntax before executing.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02167 Published 2020-03-30 No fix listed CWE-95

Vulnerabilities

Filters

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected cross site scripting

Vertiv Avocent UMG-4000 version 4.2.1.19 web interface is vulnerable to stored cross site scripting

The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to arbitrary remote code execution