Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: SEIKO EPSON CORPORATION Component: Eps Tse Server 8 Firmware Clear all filters
TI-2020-17463 CVE-2020-28931 · GHSA-pcmg-wjrm-9r44

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server…

Priority LOW 39

Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00511 Published 2020-12-16 No fix listed CWE-352
TI-2020-17462 CVE-2020-28930 · GHSA-gw7h-3fw6-97j4

A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities…

Priority LOW 25

A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the u…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00633 Published 2020-12-16 No fix listed CWE-79
TI-2020-17461 CVE-2020-28929 · GHSA-wrc6-j5cv-23xc

Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8…

Priority MEDIUM 45

Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?d…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01247 Published 2020-12-16 No fix listed CWE-306