Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Nordex Component: Nordex Control 2 Scada Clear all filters
TI-2015-05440 CVE-2015-6477 · GHSA-x62w-289v-82mf

Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application…

Priority MEDIUM 41

Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application in Nordex Control 2 (NC2) SCADA 16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.12042 Published 2015-10-18 No fix listed CWE-79
TI-2014-04408 CVE-2014-5408 · GHSA-28pc-8r63-2vcq

Nordex NC2 Cross-site Scripting

Priority LOW 36

Cross-site scripting (XSS) vulnerability in the login script in the Wind Farm Portal on Nordex Control 2 (NC2) SCADA devices 15 and earlier allows remote attackers to inject arbitrary web script or HTML via the username…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01671 Published 2014-11-05 No fix listed CWE-79