Vulnerabilities

TI-2019-10651 CVE-2019-14298 · GHSA-wc6v-4mf8-7x3j

Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to…

LOW 26

Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to addDashboard or editDashboard in CommonDataHandlerReadOnly.ashx.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0072 Published 2019-07-27 No fix listed CWE-79

TI-2019-10650 CVE-2019-14297 · GHSA-xr7v-c623-gxm3

Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption…

LOW 26

Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerReadOnly.ashx.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0072 Published 2019-07-27 No fix listed CWE-79

TI-2019-08647 CVE-2019-11569 · GHSA-4vx7-w6f9-96fg

Veeam ONE Reporter 9.5.0.3201 allows CSRF.

MEDIUM 42

Veeam ONE Reporter 9.5.0.3201 allows CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02277 Published 2019-05-06 No fix listed CWE-352

Vulnerabilities

Filters

Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to…

Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption…

Veeam ONE Reporter 9.5.0.3201 allows CSRF.