Vulnerabilities

TI-2017-12179 CVE-2017-16568 · GHSA-26v4-3ghx-vmrv

Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0…

LOW 28

Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Radio" functionality.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01985 Published 2017-11-09 No fix listed CWE-79

TI-2017-12178 CVE-2017-16567 · GHSA-g6xh-vmjv-c9qj

LOW 29

Persistent Cross-Site Scripting (XSS) vulnerability in Logitech Media Server 7.9.0, affecting the "Favorites" feature.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.02258 Published 2017-11-09 No fix listed CWE-79

TI-2017-11464 CVE-2017-15687 · GHSA-pxjp-q78g-3gfg

LOW 30

DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01451 Published 2017-10-23 No fix listed CWE-79