Vulnerabilities

TI-2020-19037 CVE-2020-36902 · GHSA-j4gw-33j8-8f5j

UBICOD Medivision Digital Signage 1.5.1 Authorization Bypass via User Privileges

HIGH 81

UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows normal users to escalate privileges by manipulating the 'ft[grp]' parameter.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01137 Published 2025-12-10 No fix listed CWE-862

TI-2020-19036 CVE-2020-36901 · GHSA-36vw-m4cf-f8jm

UBICOD Medivision Digital Signage 1.5.1 Cross-Site Request Forgery via User Management

HIGH 72

UBICOD Medivision Digital Signage 1.5.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without proper request validation.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.0031 Published 2025-12-10 No fix listed CWE-352

Vulnerabilities

Filters

UBICOD Medivision Digital Signage 1.5.1 Authorization Bypass via User Privileges

UBICOD Medivision Digital Signage 1.5.1 Cross-Site Request Forgery via User Management