Vulnerabilities

TI-2024-32483 CVE-2024-48743 · GHSA-58v4-rwx9-c9g3

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute…

MEDIUM 62

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute arbitrary code via the z parameter.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00444 Published 2024-10-25 No fix listed CWE-79

TI-2024-09521 CVE-2024-10276 · GHSA-pmv3-8v62-99pj

Telestream Sentry Reports Page page cross site scripting

MEDIUM 57

A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00388 Published 2024-10-23 No fix listed CWE-79

TI-2020-07139 CVE-2020-8887

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection…

LOW 36

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01454 Published 2020-09-22 No fix listed CWE-89

Vulnerabilities

Filters

Cross Site Scripting vulnerability in Sentry v.6.0.9 allows a remote attacker to execute…

Telestream Sentry Reports Page page cross site scripting

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection…