Vulnerabilities

TI-2021-08389 CVE-2021-26710 · GHSA-4vj5-f3fw-frfg

A cross-site scripting (XSS) issue in the login panel in Redwood Report2Web 4.3.4.5 and…

LOW 38

A cross-site scripting (XSS) issue in the login panel in Redwood Report2Web 4.3.4.5 and 4.5.3 allows remote attackers to inject JavaScript via the signIn.do urll parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.075 Published 2021-02-05 No fix listed CWE-79

TI-2021-08390 CVE-2021-26711 · GHSA-qh7g-hfr4-f2f4

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote…

LOW 28

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/Online_Help/NetHelp/default.htm turl parameter.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01897 Published 2021-02-05 No fix listed CWE-610

Vulnerabilities

Filters

A cross-site scripting (XSS) issue in the login panel in Redwood Report2Web 4.3.4.5 and…

A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote…